Barracuda Taps Bugcrowd to Manage Bug Bounty Program, Promotes Responsible Disclosure

Barracuda's Bug Bounty Program Scales with Bugcrowd's "Crowd" of More Than 13,000 Security Researchers

News provided by

Dec 17, 2014, 09:00 ET

SAN FRANCISCO, Dec. 17, 2014 /PRNewswire/ -- Bugcrowd, the innovator in crowdsourced security testing for the enterprise, today announced the launch of Barracuda's revamped Security Bug Bounty Program on the Bugcrowd platform. Barracuda was the first security vendor to run an in-house bug bounty, and this move speaks to the greater trend of IT security talent demand and how it can be addressed by tapping Bugcrowd's "Crowd" of more than 13,000 researchers worldwide. Additional information on Barracuda's Security Bug Bounty Program is available at: https://blog.bugcrowd.com/.

The Information Systems Security Association (ISSA) exemplifies this trend in its recent "Missing Generation" report, stating that, "An estimated 300,000-1,000,000 cybersecurity jobs are vacant, and demand will likely rise as the private sector faces unprecedented numbers of data breaches and cybersecurity threats." Further, the U.S. Bureau of Labor Statistics predicts 22 percent growth in security employment by 2020. The Bugcrowd platform and the Barracuda Security Bug Bounty Program encourage responsible disclosure, while promoting a more secure landscape.

"We've had tremendous success with our bug bounty program since its 2010 launch, consistently receiving a very positive response from the security community," said Dave Farrow, director of engineering at Barracuda. "Our relationship with Bugcrowd enables us to scale access in the security community from 500 researchers in our own database to now more than 13,000 in the Bugcrowd community. That feedback is invaluable to improve our security profile across our product line."

Bugcrowd was able to seamlessly integrate into Barracuda's bug remediation lifecycle, enhancing the overall experience for the research community. Bugcrowd helped migrate Barracuda's existing program to its Crowdcontrol platform, while retaining the company's internal workflow.

"Running a bug bounty program involves multiple layers of relationships – managing the remediation with a diverse set of engineering teams and also coordinating with the researchers on responsible disclosure," Farrow continued. "Our partnership with Bugcrowd simplifies that process and helps create a smooth experience for the research community."

"Bug bounty programs are extremely valuable for both the security community and for the end-customer, but they can also be taxing to manage for security teams whose resources are already tight," said Casey Ellis, CEO and co-founder of Bugcrowd. "We're thrilled to support a security pioneer like Barracuda in their efforts to scale and manage their bug bounty program."

A number of security teams have opted to work with Bugcrowd to manage their bug bounty programs, these include companies like Dropcam, Pinterest, Heroku, Blackphone/Silent Circle and Homeboy. For more information on Bugcrowd's existing customer base, visit:https://bugcrowd.com/stories. In addition, Bugcrowd recently announced it has hired industry veteran Kymberlee Price to manage its overall growth and bolster the company's researcher development.

About Bugcrowd
Bugcrowd, the innovator in crowdsourced security testing for the enterprise, was founded in 2012 by a team of security and software development experts who saw the opportunity to level the playing field in cybersecurity. Bugcrowd's revolutionary approach to cybersecurity combines a proprietary vulnerability reporting platform with the largest crowd of security researchers on the planet. Cost-effective and far faster than standard security testing programs, Bugcrowd also provides a range of responsible disclosure and managed service options that allow companies to commission a customized security testing program that fits their specific requirements. Based in San Francisco, Bugcrowd is backed by Icon Ventures, Paladin Capital and Square Peg Ventures. To learn more about Bugcrowd, visit www.bugcrowd.com or check out the Bugcrowd blog.

Bugcrowd is a trademark of Bugcrowd, Inc.

Contact information:
Brian Kramer
(617) 897-8273
[email protected]

Logo - http://photos.prnewswire.com/prnh/20141203/162060LOGO

To view the original version on PR Newswire, visit:http://www.prnewswire.com/news-releases/barracuda-taps-bugcrowd-to-manage-bug-bounty-program-promotes-responsible-disclosure-300010967.html

SOURCE Bugcrowd