Security research platform · crowdsourced
Bugcrowd
Broad crowdsourced platform with a well-defined severity taxonomy and researcher-matching to private programs.
Overview
Research on Bugcrowd
The Vulnerability Rating Taxonomy (VRT) tells you upfront how a bug class is rated - learn it to predict payouts and avoid arguing severity.
- Program type
- Bounty · VDP · Pentest · ASM
- Regions
- Global
- Payout
- USD; rewards mapped to the VRT severity of the finding
Field notes
Practical guidance
- Study the public VRT (bugcrowd.com/vulnerability-rating-taxonomy) before submitting - it sets expectations.
- Points and quality feed CrowdMatch, which drives private-program invites.
- Bugcrowd runs many managed enterprise programs; polished, on-scope reports get accepted fastest.
Primary source
Official links
Version history: normalized permanent page created 2026-08-20. Verify current platform terms before testing.