---
id: 3229
title: "Why a DIY Bug Bounty is a Bad Idea"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/why-a-diy-bug-bounty-is-a-bad-idea/"
published_at: "2017-06-08T00:00:00Z"
tags: ["bug-bounty", "bugcrowd", "triage", "application-security", "managed-programs"]
phying_url: "https://phying.com/item/3229"
lang: en
---

# Why a DIY Bug Bounty is a Bad Idea

## Summary

Bugcrowd argues against DIY bug bounties: its application security engineers handle triage, validation, and researcher communication — expertise honed via the open source VRT.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2017-06-08T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/why-a-diy-bug-bounty-is-a-bad-idea/
- **Phying News:** https://phying.com/item/3229