Bugcrowd
A company that provides crowdsourced security testing and bug bounty platform services, helping enterprises discover and fix vulnerabilities through a community of security researchers.
Core Facts
Representative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
Bug bounty programs are hosted on platforms such as HackerOne and Bugcrowd, where companies incentivize white-hat hackers to discover vulnerabilities by offering monetary rewards.
HackerOne and Bugcrowd are currently the two largest bug bounty intermediary platforms in the world.
Timeline (last 90 days)
HackerOne and Bugcrowd were both founded in 2012.
Representative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
漏洞报告呈现分层：约80%的报告集中在20%的常见漏洞类型上，而高价值零日漏洞越来越难发现，研究投入呈指数级增长
漏洞赏金平台上约80%的报告集中在20%的常见漏洞类型上
All Facts (7)
Representative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
65%VerifiedBug bounty programs are hosted on platforms such as HackerOne and Bugcrowd, where companies incentivize white-hat hackers to discover vulnerabilities by offering monetary rewards.
65%VerifiedHackerOne and Bugcrowd are currently the two largest bug bounty intermediary platforms in the world.
65%UnverifiedBugcrowd引入了优先级评级（Priority Rating）框架，将漏洞的技术严重性与业务影响相结合进行综合评估
85%UnverifiedHackerOne and Bugcrowd were both founded in 2012.
50%Unverified漏洞报告呈现分层：约80%的报告集中在20%的常见漏洞类型上，而高价值零日漏洞越来越难发现，研究投入呈指数级增长
50%Unverified漏洞赏金平台上约80%的报告集中在20%的常见漏洞类型上
50%