---
id: 3171
title: "Bug Bounty Myth #1: All Bug Bounty Programs are ‘Public’"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/bug-bounty-myth-1-all-bug-bounty-programs-are-public/"
published_at: "2018-04-27T00:00:00Z"
tags: ["bug-bounty", "bugcrowd", "vulnerability-disclosure", "program-management", "private-programs"]
phying_url: "https://phying.com/item/3171"
lang: en
---

# Bug Bounty Myth #1: All Bug Bounty Programs are ‘Public’

## Summary

Most modern bug bounty programs are private and invite-only, not public free-for-alls: curated crowds let organizations control testing volume and protect sensitive assets before going public.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2018-04-27T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/bug-bounty-myth-1-all-bug-bounty-programs-are-public/
- **Phying News:** https://phying.com/item/3171