Bugbop is a platform for running bug bounty programs, where ethical hackers (the good kind!) test your app for vulnerabilities and report them to you. It's a sa
Melbourne, Australia
Joined January 2025
- Tweets9
- Following4
- Followers13
- Likes2
Bugbop now has a REST API. Pull reports into Jira, triage from a script, comment back to hunters. Plus a skill so Claude Code (or Cursor, Codex, Copilot) can do it for you, with a human in the loop. Also: crypto payouts, PDF invoices, a security page.
bugbop.com/posts/2026/10/18/…
Heading to Vegas to show off Bugbop. See you there!
Bug bounty done right. Bugbop filters out junk reports and only charges when a real vulnerability is found in your app. Simple, fair, effective.
Catch @BugbopApp pitching at Ruby Runway, July 15 at RubyConf Community Day. @bugbop.com on Bluesky.
bugbop.com
Our first vibecoded app bug bounty program! bugbop.com/case-studies/auto…
Is this how you would secure your vibecoded app?
Adding a real time-saver today: Bugbop’s AI triage now runs as a bug is submitted, not after. That means out-of-scope reports get flagged before they ever ping the program team.
Full post: bugbop.com/posts/2026/02/01/…
#bugbounty #applicationsecurity #infosec #saas #productupdates
Bugbop turns 1 today. 7 minute founder post on traction, pivots, and next steps.
bugbop.com/posts/2026/01/13/…
Different kind of case study this time - one of the most prolific bug hunters on the platform, Yash "Maverick", a 26-year-old self-taught security researcher from Dhaka, Bangladesh who transitioned into cybersecurity.
bugbop.com/case-studies/mave…
New case study about Bugbop running a bug bounty program on Bugbop itself:
bugbop.com/case-studies/dogf…
Today we've released 4 new automated security scanners to reduce the noise in bug bounty programs: bugbop.com/posts/2025/07/30/…
