PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Evolving our submission accuracy and throttling controls to protect triage speed

bugcrowd.com | blog | #ai-security | #macos | #malware-analysis | #platform | #throttling | #accuracy | #security | #persistence | #improvement
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd updates its submission accuracy metric and throttling rules to curb AI-generated spam and speed up triage. See how the changes affect researchers.
Published
Collected

Related coverage

blog · aikido.dev
More pentesting, same budget, no surprises
Development teams ship faster than ever with AI-assisted coding. Features that previously took weeks can now be delivered in days. But security testing still runs on the old schedule. In Aikido's 2026 State of AI in Pentesting report, we found that 76% of organizations deploy significant production changes weekly or faster, while just 21% validate security on every release.
blog · labs.cognisys.group
Deep Analysis of the Malicious AppleScript Payload (MacSync Stealer)
A security professional working in the threat hunting domain recently identified a suspicious URL specifically targeting macOS users. The campaign appears to leverage a macOS variant of the well-known ClickFix technique, making it particularly noteworthy. Cognisys researchers accepted this challenge to understand this malicious code.
blog · bugcrowd.com
How we Measure Researcher Performance
Bugcrowd explains its researcher performance metrics: Kudos points by submission priority, duplicate handling, valid vs. invalid states, the accuracy formula, and priority percentiles for ranking.
blog · bugcrowd.com
Update: Q1 2020 MVP RESEARCHERS
Bugcrowd corrects formula errors in its Q1 2020 MVP evaluation and republishes the winner list, with updated rules: 80% accuracy, P1/P2 percentiles above 80%, and four non-duplicate submissions.
blog · bugcrowd.com
Optimize Your Time in Platform With New Crowdcontrol Workflows and Automation
Bugcrowd's Crowdcontrol update: self-serve onboarding for VDP and bug bounty programs, premium SLAs with the P1-P5 scale, and automation for accepting submissions and paying rewards faster.
blog · portswigger.net
Burp 2.0: How do I throttle requests?
Burp 1.x handled request throttling inside the Spider and Scanner tools. Burp 2.x introduces resource pools, letting you apply concurrent-request and rate limits per task or across multiple tasks.
Back