3 events, 3 days, over $3m paid and a new bug bash industry record. If you’re not hacking on @Bugcrowd you’re missing out on the best events the industry has to offer. Love our crowd. You are all so incredible.

If a program policy doesn't apply, CVE-2024-24919 will be validated and sent to customers for review @Bugcrowd. We don't prevent CVE visibility; if customers were already patching or aware, it will be handled in triage and conversation between hacker/customer/Bugcrowd

Today @bugcrowd, we're expanding our product line to offer VDP's for free bugcrowd.com/blog/introducin…, marking the next evolution of our VDP product, following our removal of incentives some time back. This marks a change in the industry, providing a no cost entry point for customers to build up reporting portals, to support hackers in bringing vulnerabilities to them, in a fast, and effective manner. It also allows customers to build exposure to the value of the hacking community, and then pursue other offerings in the managed bug bounty space, or pen testing space, in a paid model, that incentivises findings and discovery, whilst VDP is intended to capture existing known findings. Also, hackers, we hear you, we love you and we know there's more to change around VDP's. This isn't our only change. We're aware of the need to change terms for them, and it's currently an active discussion, as well as better separating VDP from MBB which we've done by removing incentives, and having this offering not list in our program portals. If you've other feedback, we would love to hear it, and welcome it - my slack is always open and you can reach me on HIVE, Bug Bounty Forum, or here over DM

We've listened to your feedback - @Bugcrowd, you will no longer lose access to briefs and program data once the program ends. Our new engagement model keeps your brief history and more right at your fingertips. Big thanks to @CharlieEriksen, @galnagli, @1lastBr3ath, @djurado9, and @e4366eolywrgpi1 for spotlighting this issue! 👏

One of the challenges that comes up in support @Bugcrowd: briefs changing while submissions are pending, which caused scope misunderstandings. Going forward, hackers, customers, and triagers will have access to the original brief at the time of submission. Additionally, we're preserving customer notes during triage to improve accuracy. A big thank you to @bishal0x01, @CharlieEriksen, @imhaxormad who brought this to our attention! 🙏