Audience
Open-source component bug bounty platform for businesses wanting to compete with other hackers and make the web a safer place
About PlugBounty
There are thousands of open-source components such as WordPress plugins and PHP extensions (coming soon) that can be audited. Quickly find the most popular components with the widest attack surface that are automatically listed by Plugbounty. Receive research score for every bug you find. Researchers will be ranked based on the research score on monthly and weekly leaderboard. Wether or not a vendor reacts on your findings, Plugbounty team will review the report and you will get the research score. Every month, a fixed budget will be paid out to top researchers on the leaderboard.
Other Popular Alternatives & Related Software
Bugbop
Bugbop is a bug bounty and disclosure platform built for program managers.
Bug bounty and disclosure programs create a safe channel for security researchers to report vulnerabilities. Teams review the findings, remediate valid issues, and optionally offer financial rewards/swag. By using a platform, you get increased visibility and authenticity, structured workflows, automated triage, researcher management, and payment handling - admin chores that are difficult and time-consuming to handle yourself.
Bugbop has simple pricing ($0 monthly + 15% on bounties) and can be set up completely self-service (i.e. no "call us for a demo and pricing"). It removes program noise with automated AI triage and severity analysis. It gives teams a flexible way to run bug bounty or disclosure without the overheads of the enterprise platforms.
You can sign up for free to test the platform with a private program.
Learn more
SafeHats
The SafeHats bug bounty program is an extension of your security setup. Designed for enterprises, the program taps into a vast pool of highly skilled and carefully vetted security researchers and ethical hackers to comprehensively test your application’s security. It also provides your customers with comprehensive protection. Run programs that suit your current security maturity level. We have designed a Walk-Run-Fly program concept for Basic enterprises, progressive and advanced enterprises respectively. Testing for more sophisticated vulnerability scenarios. Researchers are incentivized to focus high severity and critical vulnerabilities. A comprehensive policy between the security researchers and clients bound by mutual trust, respect, and transparency. Security researchers from diverse profiles, backgrounds, ages, and professions, creating a wide range of security vulnerability profiles.
Learn more
Immunefi
Since its founding, Immunefi has become the leading bug bounty platform for web3 with the world's largest bounties and payouts and now has over 50+ employees around the world. If you're interested in joining the team, please see our careers page. Bug bounty programs are open invitations to security researchers to discover and responsibly disclose vulnerabilities in projects’ smart contracts and applications, which can safe web3 projects hundreds of millions--and even billions--of dollars. For their good work, security researchers receive a reward based on the severity of the vulnerability. When you find a vulnerability, create an account and submit the bug via the Immunefi bugs platform. We have the fastest response time in the industry.
Learn more
Open Bug Bounty
Open Bug Bounty project enables website owners to receive advice and support from security researchers around the globe in a transparent, fair and coordinated manner to make web applications better and safer for everyone’s benefit. Open Bug Bounty’s coordinated vulnerability disclosure platform allows any security researcher reporting a vulnerability on any website as long as the vulnerability is discovered without any intrusive testing techniques and is submitted following responsible disclosure guidelines. The role of Open Bug Bounty is limited to independent verification of the submitted vulnerabilities and proper notification of website owners by all available means. Once notified, the website owner and the researcher are in direct contact to remediate the vulnerability and coordinate its disclosure. At this and at any later stages, we never act as an intermediary between website owners and security researchers.
Learn more
Integrations
No integrations listed.
Company Information
PlugBounty
www.plugbounty.com
Videos and Screen Captures
Other Useful Business Software
The AI coach for teams, built on validated assessments.
Give managers and teams proactive, contextual coaching to lead effectively, communicate clearly, and navigate real work situations as they happen.
Product Details
Platforms Supported
Cloud
