A crowdsourced security platform running bug bounty and vulnerability disclosure programs. Researchers earn cash for valid findings, ranked by a points system.
Bugcrowd is a bug bounty platform where anyone can register to start earning, and the work can be done remotely. Fees are Bounties set by each program and you can withdraw via PayPal and Bank transfer. Founded in 2012, Bugcrowd is based in San Francisco, California, United States. It is available worldwide.
Last updated
Not verified yet: Payment protection · Minimum payout · Payout speed Know the answer? Tell us
What people actually earn on Bugcrowd
Figures published by Bugcrowd or by independent studies and surveys, as dated. Individual earnings vary widely.
Can I join Bugcrowd?
Not verified yet: First payout Know the answer? Tell us
A Jumio ID check is required before reporting to managed programs, and payouts need a tax form plus bank transfer or PayPal.
Official requirements ↗ · Check which platforms you can join →
Not verified yet: Mobile apps · Support Know the answer? Tell us
How Bugcrowd compares
- Bugcrowd is one of just 2 bug bounty platforms we track (of 10) that pay out via PayPal.
- Founded in 2012, Bugcrowd has been running for about 14 years — longer than 8 of the 10 bug bounty platforms we track with a known launch year.
Compared with the bug bounty platforms in our directory. See them all →
Is Bugcrowd legit?
Bugcrowd is a real, operating platform. What we could verify:
- Operating since 2012 (14 years)
- Headquartered in San Francisco, California, United States
- Has a Wikipedia article
Listing last updated September 2026 · how we verify platforms · Missing or out of date? Tell us
Guides
No step-by-step guide for Bugcrowd yet. Browse all guides or find the right way to earn for you.
Frequently asked questions
How much does Bugcrowd charge?
Bugcrowd fees: Bounties set by each program.
How do you get paid on Bugcrowd?
Bugcrowd pays out via PayPal and Bank transfer.
Which countries is Bugcrowd available in?
Worldwide.
How much do people earn on Bugcrowd?
Bugcrowd had well over 500,000 hackers on its platform and was adding around 50,000 a year, TechCrunch reported in February 2024. Individual earnings vary widely.
Is Bugcrowd legit?
Yes, Bugcrowd is a real, operating platform: operating since 2012 (14 years), headquartered in San Francisco, California, United States and has a Wikipedia article. As with any platform, check its current terms before relying on it for income.
What are the best Bugcrowd alternatives?
Similar platforms include Synack, Cobalt, HackerOne and Zerocopter. Compare their fees and payouts in the alternatives section below.
Compare Bugcrowd with…
Bugcrowd alternatives
More bug bounty platforms like HackerOne
SynackA vetted security testing platform whose Red Team accepts researchers only after skills assessment and background checks. Members get steady…
synack.com51 views
CobaltA pentest-as-a-service platform whose vetted Cobalt Core community of pentesters earns from structured engagements rather than open bounties…
cobalt.io53 views
HackerOneThe largest bug bounty platform, where security researchers report vulnerabilities to companies and earn bounties. Open sign-up, with invita…
hackerone.com62 views
ZerocopterA Dutch security platform running bug bounty and coordinated vulnerability disclosure programs with a community of invited researchers.
zerocopter.com90 views
HackenProofA bug bounty platform from the Hacken security ecosystem, focused on web3 and crypto projects with public and private programs.
hackenproof.com48 views
IntigritiA European bug bounty platform connecting ethical hackers with companies across the continent and beyond. Known for community events and fas…
intigriti.com47 views