Jekyll2026-04-16T20:47:18+00:00https://docs.bugcrowd.com/feed/changelogs/customer.xmlBugcrowd user documentation2026-03-09T00:00:00+00:002026-03-09T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/vrt-update-118<p>Bugcrowd’s Vulnerability Rating Taxonomy (VRT) has been enhanced to support mappings to auto-suggest CVSS vectors for opt-in customers.</p>

Bugcrowd’s Vulnerability Rating Taxonomy (VRT) has been enhanced to support mappings to auto-suggest CVSS vectors for opt-in customers.

2026-02-02T00:00:00+00:002026-02-02T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/the-security-inbox<p>We are excited to announce the launch of the new Security Inbox. Designed as a high-performance command center, it offers streamlined triage workflows, powerful customization features, and deeper platform efficiencies to accelerate your time to remediation.</p> <h2 id="whats-new">What’s New</h2> <ul> <li><strong>Saved Views &amp; Pinning:</strong> Design your perfect workflow. Create, share, and pin custom filter sets as tabs for one-click access to your most critical work queues.</li> <li><strong>Focused View Layout:</strong> Maximize productivity with a split-screen interface. View full technical details side-by-side without losing your place (activities, brief, disclosures, etc.)</li> <li><strong>AI Triage Assistant:</strong> Leverage our secure, in-platform AI operational assistant to summarize complex findings, suggest remediation steps, and even generate Nuclei retest templates using natural language.</li> <li><strong>Automated Integration Triggers:</strong> Turn filters into actions. Link your Saved Views directly to Jira or other integrations to automate ticket creation based on your specific criteria.</li> </ul> <h2 id="improved-capabilities">Improved Capabilities</h2> <ul> <li><strong>Advanced Search &amp; Filtering:</strong> Find what you need in seconds. Search by Submission ID, Researcher, or Target with an enhanced filtering engine designed to help you focus on the vulnerabilities that matter most.</li> <li><strong>Modernized UI:</strong> Experience a refreshed, scannable design across the entire Inbox, specifically engineered to reduce cognitive load during high-volume triage sessions.</li> </ul> <h2 id="ready-to-dive-in">Ready to dive in?</h2> <p>To take full advantage of these new features and explore the updated workflows, please visit our <a href="https://docs.bugcrowd.com/customers/security-inbox/the-security-inbox/">Security Inbox Documentation.</a></p>

We are excited to announce the launch of the new Security Inbox. Designed as a high-performance command center, it offers streamlined triage workflows, powerful customization features, and deeper platform efficiencies to accelerate your time to remediation.

2026-01-29T00:00:00+00:002026-01-29T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/rewards-page-update<h2 id="enhancement-8-hour-reward-cancellation-window">Enhancement: 8-Hour Reward Cancellation Window</h2> <p>We’ve added more flexibility to your reward process. Customers now have a 8-hour window to cancel a reward after it has been issued, allowing you to quickly correct errors before payments are finalized.</p> <ul> <li><strong>Grace Period:</strong> View a real-time countdown for “Processing” rewards.</li> <li><strong>Easy Voiding:</strong> Cancel rewards directly from the Reward History table.</li> <li><strong>Transparency:</strong> Select a reason for cancellation to keep researchers informed.</li> <li><strong>Instant Recovery:</strong> Cancelled funds are immediately returned to your reward pool.</li> </ul> <p>After 8 hours, rewards are marked as <strong>Finalized</strong> and processed for payment.</p> <p>For more details, view the updated <a href="https://docs.bugcrowd.com/customers/quick-start/the-rewards-page/">Rewards Page Documentation</a>.</p>

Enhancement: 8-Hour Reward Cancellation Window

2025-12-10T00:00:00+00:002025-12-10T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/core-ai-platform<p>We are excited to announce the launch of the new Bugcrowd AI capabilities designed to accelerate remediation, streamline triage, and provide deeper insights into your security posture—all while maintaining strict data privacy and control.</p> <p><strong>1. AI Triage Assistant</strong><br /> Transform triage from a static checklist into a dynamic conversation. The AI Triage Assistant is a secure, in-platform operational assistant embedded directly within the Submission Inbox. It empowers security teams to investigate vulnerabilities using natural language without leaving their primary workflow.</p> <ul> <li><strong>Conversational Investigation</strong>: Ask questions to probe for details, such as “Explain this payload to me as if I were a junior developer” or “Model a potential attack chain for this flaw”.</li> <li><strong>Instant Efficiency</strong>: Generate on-demand artifacts, including remediation guidance and valid Nuclei templates for retesting.</li> <li><strong>Context-Aware</strong>: The assistant automatically references submission details, comments, and engagement metadata to ensure relevance and accuracy.</li> </ul> <p><strong>2. AI Analytics</strong><br /> Unlock deeper insights with natural language querying. AI Analytics empowers Organization Owners to analyze security program data through interactive dashboards and a new “Ask AI” interface.</p> <ul> <li><strong>Ask AI</strong>: Query your program data using natural language (e.g., “What is our average ‘Days to Accept’ compared to last quarter?”) to get instant answers without generating complex reports.</li> <li><strong>Interactive Dashboards</strong>: Visualize security posture with pre-defined reports where selecting data points highlights corresponding data across graphs.</li> <li><strong>Flexible Filtering</strong>: Filter dashboards by date range, program name, or engagement type, and export data to CSV or PDF.</li> </ul> <p><strong>3. AI Connect</strong><br /> The secure “front door” for your internal AI tools. AI Connect is a dedicated Model Context Protocol (MCP) server that securely streams your program data to your internal AI applications.</p> <ul> <li><strong>Bring Your Own Agent</strong>: Connect IDEs like Cursor or GitHub Copilot directly to your Bugcrowd program.</li> <li><strong>Real-Time Data</strong>: Query submission data instantly via a secure Server-Sent Events (SSE) stream—no need to build complex data pipelines or exports.</li> <li><strong>Developer-Ready</strong>: Enable your internal AI to merge vulnerability data with your codebases to generate context-aware remediation advice.</li> </ul> <h2 id="security--data-privacy">Security &amp; Data Privacy</h2> <p><strong>Centralized governance for Generative AI.</strong> We understand that data privacy is paramount. The <strong>Global Control of LLMs</strong> allows Organization Owners to centrally manage the use of GenAI features across their organization. Organization Owners can Enable or Disable all LLM-powered features (like <strong>AI Triage Assistant</strong> and <strong>Ask AI</strong>) with a single action.</p> <p>The Bugcrowd AI Capabilities is built on a <strong>“Zero Training Policy.”</strong></p> <ul> <li><strong>No Training</strong>: Your data is never used to train third-party models.</li> <li><strong>Inference Only</strong>: Data is used solely to generate the feature’s immediate output and is not retained.</li> <li><strong>Secure Infrastructure</strong>: All LLMs are hosted securely within Bugcrowd’s infrastructure.</li> </ul> <h2 id="for-more-information-and-documentation">For More Information and Documentation:</h2> <ul> <li><a href="https://docs.bugcrowd.com/customers/ai-capabilities/ai-analytics/"><strong>AI Analytics: Ask AI</strong></a></li> <li><a href="https://docs.bugcrowd.com/customers/reporting-organization/organization-analytics/"><strong>Organization Analytics</strong></a></li> <li><a href="https://docs.bugcrowd.com/customers/ai-capabilities/ai-triage-assistant/"><strong>AI Triage Assistant</strong></a></li> <li><a href="https://docs.bugcrowd.com/customers/ai-capabilities/ai-connect/"><strong>AI Connect</strong></a></li> <li><a href="https://docs.bugcrowd.com/customers/ai-capabilities/global-controls-of-llm/"><strong>Global Control of LLMs</strong></a></li> </ul>

We are excited to announce the launch of the new Bugcrowd AI capabilities designed to accelerate remediation, streamline triage, and provide deeper insights into your security posture—all while maintaining strict data privacy and control.

2025-11-17T00:00:00+00:002025-11-17T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/request-a-response<p>We have enhanced the Request a Response feature to foster stronger collaboration between customers and researchers, ensuring more timely and effective submission resolution.</p> <h2 id="whats-new">What’s New</h2> <h3 id="1-automatic-expiration">1. Automatic Expiration</h3> <p>Any open RaR will <strong>automatically expire after 10 business days</strong> if no response is provided by the party that the request was directed to.</p> <ul> <li>To prevent expiration and maintain Researcher engagement, please ensure your team responds to or triages submissions with an active RaR within this 10-business-day window.</li> <li>The expiration event is recorded in the submission’s <strong>Activity Log</strong>.</li> </ul> <h3 id="2-increased-researcher-quota">2. Increased Researcher Quota</h3> <ul> <li>Researchers can now have <strong>2 open RaR</strong> at any given time (previously the limit was 1).</li> <li>This allows for more collaboration and may result in a slight increase in RaR activity on your submissions.</li> </ul> <p><em>For more details on how to use this functionality, see</em> <a href="https://docs.bugcrowd.com/customers/submission-management/responding-to-a-request-response/"><strong>Responding to a Request a Response</strong></a></p>

We have enhanced the Request a Response feature to foster stronger collaboration between customers and researchers, ensuring more timely and effective submission resolution.

2025-09-30T00:00:00+00:002025-09-30T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/jira-priority-field-mapping<p>The Bugcrowd Jira integration now offers the ability to configure the Submissions Priority field to map to a Jira field with enumerated values. In the Jira integration Field Mapping configuration page, administrators can map the submission priority field to the Jira priority field, severity field, or any other custom field that has a set of enumerated values.</p> <p>After mapping the fields, administrators can map the field values between these two fields. This enhancement allows Jira tickets to reflect the correct priority specified in the submission, making it easier and faster for security teams to triage tickets.</p>

The Bugcrowd Jira integration now offers the ability to configure the Submissions Priority field to map to a Jira field with enumerated values. In the Jira integration Field Mapping configuration page, administrators can map the submission priority field to the Jira priority field, severity field, or any other custom field that has a set of enumerated values.

2025-08-21T00:00:00+00:002025-08-21T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/vrt-update-117<p>Bugcrowd’s Vulnerability Rating Taxonomy (VRT) has been enhanced with an expansion covering a new top-level category for Cloud Security and several updates to Server Security Misconfigurations. These changes provide more granular classifications for common vulnerabilities found in modern, cloud-native environments and streamline existing server-side categories for improved clarity.</p>

Bugcrowd’s Vulnerability Rating Taxonomy (VRT) has been enhanced with an expansion covering a new top-level category for Cloud Security and several updates to Server Security Misconfigurations. These changes provide more granular classifications for common vulnerabilities found in modern, cloud-native environments and streamline existing server-side categories for improved clarity.

2025-08-19T00:00:00+00:002025-08-19T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/engagement-simulator-enhancements<p>We’ve released major enhancements to the <strong>Bug Bounty Engagement Simulator</strong> to give you greater flexibility, more accurate forecasts, and deeper insights when planning your engagements.</p> <h2 id="whats-new">What’s New</h2> <ul> <li><strong>12-Month Forecasting</strong>: Simulate engagement outcomes over a full calendar year (previously limited to 6 months).</li> <li><strong>Expanded Input Options</strong>: Customize simulations with new configuration controls, including: <ul> <li>ID verification</li> <li>Background checks</li> <li>Geographic restrictions</li> <li>NDA requirements</li> <li>Credentials setup</li> <li>Collaboration settings</li> <li>Disclosure settings</li> </ul> </li> <li><strong>Submission Funnel View</strong>: See projected outcomes broken down by: <ul> <li>Total submissions (all vulnerabilities, including duplicates)</li> <li>Valid submissions (unresolved + resolved + duplicates)</li> <li>Unique submissions (unresolved + resolved)</li> </ul> </li> <li><strong>Relocated Tool</strong>: The simulator now lives in the <a href="https://docs.bugcrowd.com/customers/program-management/engagements-page/">Engagements Page</a> for easier access from your program dashboard.</li> </ul> <h2 id="benefits">Benefits</h2> <ul> <li>Plan budgets and resources with <strong>12 months of projections</strong>.</li> <li>Model “what-if” scenarios to see how different requirements impact participation, findings, and costs.</li> <li>Better prepare for triage workloads with the <strong>submission quality breakdown</strong>.</li> </ul> <p>For detailed instructions, see <a href="https://docs.bugcrowd.com/customers/engagement-management/engagement-simulator/">Bug Bounty Engagement Simulator</a>.</p>

We’ve released major enhancements to the Bug Bounty Engagement Simulator to give you greater flexibility, more accurate forecasts, and deeper insights when planning your engagements.

2025-08-14T00:00:00+00:002025-08-14T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/reassign-move-individual-submission<p>We’ve added new functionality that allows you to reassign individual submissions to the correct program and/or engagement — giving you more flexibility and control over managing findings.</p> <h2 id="whats-new">What’s New</h2> <ul> <li><strong>Reassign submissions:</strong> Move a submission to a different engagement in the same security program when it’s in a New or Triaged state.</li> <li><strong>Move submissions:</strong> Relocate a submission to a different program and engagement when it’s in a New or Triaged state.</li> <li><strong>Automatic researcher access:</strong> Researchers will automatically gain access to the new engagement (NDA signing process triggered if required).</li> <li><strong>Full activity tracking:</strong> All actions are logged in submission, destination program, and engagement activity feeds for full visibility.</li> </ul> <h2 id="benefits">Benefits</h2> <ul> <li>Correct misfiled submissions quickly without needing Bugcrowd support.</li> <li>Ensure findings are managed in the correct scope and by the right teams.</li> <li>Maintain accurate reporting and program organization.</li> </ul> <p>For more details on how to use this functionality, see <a href="https://docs.bugcrowd.com/customers/submission-management/reassign-or-move-individual-submissions">Managing Submission Location: Reassign or Move</a></p>

We’ve added new functionality that allows you to reassign individual submissions to the correct program and/or engagement — giving you more flexibility and control over managing findings.

2025-08-12T00:00:00+00:002025-08-12T00:00:00+00:00https://docs.bugcrowd.com/changelog/customers/streamlined-navigation<p>We’ve streamlined navigation and refreshed the UI to make managing your programs and engagements faster and easier.</p> <h2 id="program-level-changes">Program-Level Changes</h2> <ul> <li><strong>New Engagement Page:</strong> All engagements for a program now live on a dedicated page. Includes <a href="https://docs.bugcrowd.com/customers/engagement-management/engagement-simulator/">Engagement Simulator</a> and <a href="https://docs.bugcrowd.com/customers/engagement-management/archiving-engagements/">Archiving tools</a>.</li> <li><strong>Credentials Page:</strong> Formerly “Researchers,” now clearly labeled for credential viewing and management.</li> <li><strong>Program Settings:</strong> Renamed from “Settings” for clarity; <strong>Low Reward Pool Threshold</strong> now lives in the <strong>Reward Pool</strong> section.</li> </ul> <h2 id="engagement-level-changes">Engagement-Level Changes</h2> <ul> <li>Left-Side Navigation: Easier access to all engagement pages.</li> <li>Engagement Switcher: Jump between active engagements quickly.</li> </ul> <h2 id="ui--experience-updates">UI &amp; Experience Updates</h2> <ul> <li>Faster navigation between program and engagement layers.</li> <li>New breadcrumbs for easy orientation.</li> <li>Refined page titles for clarity.</li> <li>Modern visual design with refreshed colors, improved readability, and <strong>Dark Mode</strong> support.</li> <li><strong>Leaderboard Upgrade:</strong> Cleaner layout, country filter, top 100 view, and quick time-range toggles.</li> </ul> <p>For more details, please see the following documentation:</p> <ul> <li><a href="https://docs.bugcrowd.com/customers/fund-management/reward-pool-management/">Reward Pool Management</a></li> <li><a href="https://docs.bugcrowd.com/customers/program-management/engagements-page/">Engagements Page</a></li> <li><a href="https://docs.bugcrowd.com/customers/engagement-management/engagement-overview-switcher/">Engagement Overview &amp; Switcher</a></li> </ul>

We’ve streamlined navigation and refreshed the UI to make managing your programs and engagements faster and easier.