Researcher Changelog

Extended support for Automotive categorization, developed in collaboration with Stellantis.
Downgraded all Flash-based entries to a rating of P5
Improved existing remediation advice for a number of entries
Simplified Weak Login Function entries with a baseline severity rating of P4

Sep 16th, 2020

Just for You - Program Recommendations

Added

Viewing just for you programs

Sep 15th, 2020

Discover Programs

Added

Discovering Programs

Sep 12th, 2020

2FA Backup Codes in Platform

Added

Enabling backup codes for 2FA configuration

Jun 18th, 2020

Payments Through Bank Transfer

Added

Setting Up Bank Transfer payment method

Dec 19th, 2019

Achievement Badges

Added

Dec 19th, 2019

CrowdStream and Coordinated Disclosure

Added

Nov 5th, 2019

Program Feedback when Ignoring or Hiding

Added

Ignoring invitation or hiding program

Changed

Researcher Avatar visible to submitted programs

Oct 11th, 2019

Submission Retesting

Added

Aug 2nd, 2019

Certificates

Added

Adding certifications

Jul 24th, 2019

Safe Harbor Search

Added

Researchers can filter by program’s safe harbor status within program search

Jun 17th, 2019

Researcher Collaboration

Added

Researcher Collaboration

May 7th, 2019

Public Program Credential Support and Improved Target Management

Improved

Public Programs can now support credentials

Apr 11th, 2019

Image Embeds

Added

Image Embeds in Submissions and Comments

Apr 1st, 2019

Program Search Launched

Added

Program Search

Mar 14th, 2019

Updating to VRT 1.7

Added

Automative Security Misconfiguration category
Sensitive Data Exposure > Weak Password Reset Implementation > Token Leakage via Host Header Poisoning as a new P2 variant, which is consistent with how this issue has been triaged by Bugcrowd’s Application Security Engineers so far.
Two new P4’s related to 2FA Secret Management

Improved

Remediation Advice links to latest OWASP Documentation

Feb 16th, 2019

Comparison Operators for Dates

Improved

Tokenized date search

Dec 17th, 2018

Payments Update

Added

Payments

Dec 17th, 2018

File Support Update

Improved

Platform supports 100MB for all file uploads

Nov 2nd, 2018

Updating to VRT 1.6

Improved

VRT 1.6

Oct 30th, 2018

Point Reward System Better Aligns Expectations and Acknowledges Researchers for Their Hard Work

Added

Won’t Fix submissions are rewarded points
Payments

Fixed

Email notifications on updates for Researchers

Oct 26th, 2018

Updating to VRT 1.5

Improved

VRT 1.5

Sep 24th, 2018

Crowdcontrol Improves Adjusted Payment Workflow

Added

Adjusting mistaken rewards workflow updated

Sep 19th, 2018

Added Platform Usability and Preference Control

Added

Sep 18th, 2018

Callout for submissions that are blocked

Improved

Submission Blockers

Aug 15th, 2018

Improved identification of Bugcrowd

Improved

Identify Bugcrowd employees in activity feeds with a new icon identifier

Aug 7th, 2018

Hacker Education with Bugcrowd University

Added

Bugcrowd University

Jul 10th, 2018

Improved Submission Search

Improved

Tokenized search

Jul 3rd, 2018

Advanced Crowdcontrol UX

Added

Unique Avatars
updated label on the Programs page, to highlight recently updated programs.
Bugcrowd ninja forwarding now includes the to email address to allow sub-domains.
Quick links panel in Researcher dashboard
Leveraging program or user images for unfurling

Improved

Use Crowdcontrol on the go, now with a responsive navigation bar.
Notifications show below the customer state dropdown, so you can quickly change states, without needing to dismiss.