4 Years of Bugcrowd’s Bug Bounty: Evolution and Learnings

Casey Ellis reflects on four years of bug bounties on Bugcrowd's own apps: time-boxed programs, an always-on public bounty paying $500-$5,000, and two-week On-Demand crowdsourced pentests for releases.