Request a Demo Contact Us

Get Started with a Vulnerability Disclosure Program

bugcrowd-product-hero@2x

1 Week

Average time to discover the first valid vulnerability via a Bugcrowd VDP

1 Month

Average time to discover the first critical vulnerability via a Bugcrowd VDP

No longer optional

Vulnerability Disclosure Programs (VDPs) are now an industry standard (and are often required by regulation) for proving a public commitment to a strong security posture. A complement to bug bounties and penetration testing, VDPs allow anyone on the internet to altruistically report any vulnerability they’ve found, and for program owners to implement guidelines and best practices for their intake, management, and disclosure.

Adoption of a VDP is visible proof that your organization understands the inevitability of vulnerabilities, and is committed to security transparency. But, most organizations lack the resources or expertise to stand up and manage a VDP on their own.

Pain-free VDP at your pace

The solution is a fully managed VDP on the Bugcrowd Platform. Bugcrowd’s VDP solution–adopted by CISA in 2020 as the standard for U.S. civilian Federal agencies–includes vulnerability intake and tracking, continuous validation and triage, and program support, as well as developer tool integrations to accelerate discovery and remediation.

You get all the benefits of a well-run VDP, with none of the hassles and overhead of managing a program yourself. And, you can choose a price and entry point that makes sense for you.

Compare plan features

BASIC 15

$299/month
Perfect way to get started
Contact Us
Includes:
  • First 15 Submissions
  • Automatic Status Updates
  • Managed Email Submissions
  • Embedded Submission Form
  • SDLC Integration
  • Self Support

BASIC 75

$999/month
Ideal for ramping up a VDP
Contact Us
Includes:
  • First 75 Submissions
  • Automatic Status Updates
  • Managed Email Submissions
  • Embedded Submission Form
  • SDLC Integration
  • Self Support

FULLY MANAGED

Ideal for high-volume VDPs
Contact Us
Includes:
  • Unlimited Submissions
  • Performance Dashboard
  • Remediation Advice
  • Promotional listing on Bugcrowd.com = 18x more submissions on average
  • Researcher Relations
  • Solution Architect
  • Managed Support

Pricing is for the first year when paid annually upfront. New VDP Customers only.

Frequently Asked Questions

If something isn’t covered, or you have any questions please email us at sales@bugcrowd.com.

A Vulnerability Disclosure Program allows security researchers to safely report found vulnerabilities to your team. It can be a messy process for researchers to know exactly how to share vulnerabilities in your applications and infrastructure in a safe and efficient manner. We make this dead simple with our multiple methods for intake and managed service features like Triage and Coordinated Disclosure.

After you purchase, you can work with your account team to upgrade or change your plan.

We do not limit the number of users on the platform for active programs. We do have role-based access so you can control access to specific parts of your engagements and management tasks.

Currently, we do not have a free offering on the Bugcrowd Platform.

At the time of launch you will be assigned an account team including an account manager, they will be your primary point of contact along with your support and operations representative to ensure your engagement runs smoothly.

To cancel your plan you can contact your account manager or email support@bugcrowd.com.
RELATED RESOURCES

Learn more about Vulnerability Disclosure Programs