PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Update to Bugcrowd Points System

bugcrowd.com | blog | #bug-bounty | #bugcrowd | #platform-policy | #platform-update | #crowdmatch | #duplicates | #points-system | #duplicate-submissions | #researcher-incentives
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd stops awarding points for duplicate P3 and P4 submissions after researchers farmed low-severity duplicates, curbing points inflation and keeping CrowdMatch matching meaningful.
Published
Collected

Related coverage

blog · bugcrowd.com
Points don’t matter; Your skills do
Bugcrowd removed points from VDPs: private program invites now depend on proven, target-specific skills and dollars earned on the platform, as CrowdMatch replaces the old flat kudos metric.
blog · bugcrowd.com
Researcher Profiles: Resumes in Platform and Profile Changes
Bugcrowd added a Resume section to researcher profiles for skills, experience, and certifications, improving CrowdMatch program matching. Profiles also gained banners and layout updates.
blog · bugcrowd.com
Program Recommendations: Just for You!
Bugcrowd's new Discovery page offers a Just For You engine recommending programs via Experts Needed, Try Something New, and GitHub activity groups, plus Featured lists and Program Cards.
vulnerability · bugcrowd.com
How Bugcrowd sees Vulnerability Disclosure Programs and Points
Bugcrowd disables kudos points on VDPs starting June 1, clarifying that private invites are driven by proven skill on high-impact reports rather than point chasing that fueled duplicate spam.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
Back