Audience
Bug bounty solution for businesses
About Bountysource
Bountysource is the funding platform for open-source software. Users can improve the open-source projects they love by creating/collecting bounties and pledging to fundraisers. Anyone can come to Bountysource and create or claim their project's team (GitHub Organizations are automatically created as teams on Bountysource). A bounty is a cash reward offered for development. In the case of Bountysource, this ties directly to an open issue in the system. Bountysource itself is concerned. Any quality control for whether to accept a fix is the responsibility of the maintainers for the given project. This includes whether affiliation with the project counts for having the fix accepted or not.
Other Popular Alternatives & Related Software
Bugbop
Bugbop is a bug bounty and disclosure platform built for program managers.
Bug bounty and disclosure programs create a safe channel for security researchers to report vulnerabilities. Teams review the findings, remediate valid issues, and optionally offer financial rewards/swag. By using a platform, you get increased visibility and authenticity, structured workflows, automated triage, researcher management, and payment handling - admin chores that are difficult and time-consuming to handle yourself.
Bugbop has simple pricing ($0 monthly + 15% on bounties) and can be set up completely self-service (i.e. no "call us for a demo and pricing"). It removes program noise with automated AI triage and severity analysis. It gives teams a flexible way to run bug bounty or disclosure without the overheads of the enterprise platforms.
You can sign up for free to test the platform with a private program.
Learn more about Bugbop
Immunefi
Since its founding, Immunefi has become the leading bug bounty platform for web3 with the world's largest bounties and payouts and now has over 50+ employees around the world. If you're interested in joining the team, please see our careers page. Bug bounty programs are open invitations to security researchers to discover and responsibly disclose vulnerabilities in projects’ smart contracts and applications, which can safe web3 projects hundreds of millions--and even billions--of dollars. For their good work, security researchers receive a reward based on the severity of the vulnerability. When you find a vulnerability, create an account and submit the bug via the Immunefi bugs platform. We have the fastest response time in the industry.
Learn more about Immunefi
Open Bug Bounty
Open Bug Bounty project enables website owners to receive advice and support from security researchers around the globe in a transparent, fair and coordinated manner to make web applications better and safer for everyone’s benefit. Open Bug Bounty’s coordinated vulnerability disclosure platform allows any security researcher reporting a vulnerability on any website as long as the vulnerability is discovered without any intrusive testing techniques and is submitted following responsible disclosure guidelines. The role of Open Bug Bounty is limited to independent verification of the submitted vulnerabilities and proper notification of website owners by all available means. Once notified, the website owner and the researcher are in direct contact to remediate the vulnerability and coordinate its disclosure. At this and at any later stages, we never act as an intermediary between website owners and security researchers.
Learn more about Open Bug Bounty
Yogosha
Run, manage and oversee all your Offensive Security testing —Pentest as a Service and Bug Bounty— on one secure platform for a seamless, interoperable and efficient DevSecOps experience.
- PTaaS: a timely and cost-efficient security audit of your assets. Your security weaknesses identified for a flat fee. Launch a test within a week.
- Bug bounty: a continuous, adversarial and pay-per-result testing to detect business-critical vulnerabilities.
We rely on a secure platform, available as SaaS or self-hosted, and on a private and selective community of security researchers, the Yogosha Strike Force. Each member of the YSF has been screened through stringent technical and pedagogical tests, after which only 20% of candidates are accepted.
Learn more about Yogosha
Integrations
Company Information
Bountysource
Founded: 2006
United States
www.bountysource.com
Videos and Screen Captures
Other Useful Business Software
Our Free Plans just got better! | Auth0
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Product Details
Platforms Supported
Cloud
Training
Documentation
Support
Online
Bountysource Frequently Asked Questions
Q: What kinds of users and organization types does Bountysource work with?
Bountysource works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does Bountysource support in their product?
Bountysource supports these languages: English.
Q: What kind of support options does Bountysource offer?
Bountysource offers support via online.
Q: What other applications or services does Bountysource integrate with?
Bountysource integrates with: Bugzilla, GitHub, Jira, MantisBT, and Trac.
Q: What type of training does Bountysource provide?
Bountysource provides training in the form of documentation.
