Bugcrowd’s Incentive Programs are used to recognize and reward the Researcher community for platform and submission successes. These merit-based programs are designed to challenge you to achieve new levels of success; highlighting and celebrating your achievements throughout the year.
Incentive programs are evaluated on a quarterly basis that run slightly different than a standard calendar year:
|Quarter 1||February - April|
|Quarter 2||May - July|
|Quarter 3||August - October|
|Quarter 4||November - January|
How and when we determine Incentive winners
Two weeks after the close of each Quarter, we review all researcher reports that were submitted during that Quarter. All researchers who qualify for the an Incentive Program will be contacted with status and next steps about a week after we review the data. A winners blog will then be posted a week after that, with a list of researcher handles that have a public profile.
- Bugcrowd reviews data 2-weeks after the close of the quarter
- Bugcrowd contacts winning researchers 3-weeks after the close of the quarter
- Bugcrowd will announce winners 4-weeks after the close of the quarter
Launched in 2019, this program is run on a 12-month basis, February through January. This program is a progressive rewards program. This means that the more quarters you qualify for during the year, the better your swag award. For example, if you hit MVP status for Q1 and Q3. You have qualified for 2 MVP quarters and will receive both Tier 1 and Tier 2 swag prizes.
To qualify for the MVP Program a researcher must meet the following criteria:
- Maintain a minimum average Accuracy Rate of 90% for the quarter
- Achieve a Priority Percentile for P1s above 80% – OR – Achieve a Priority Percentile for P2s above 80% for the quarter
- Submit at least 4 qualifying P1 or P2, non-duplicate submissions
- Have zero, significant platform infractions during the two, preceding quarters
We are super excited for this year and seeing all the amazing work you will do, and we cannot wait to celebrate it!. If you have questions, send an email to firstname.lastname@example.org.
P1 Warriors Program
Are you particularly skilled at exploiting Server-Side Injection or Security Misconfigurations? If so, this program is going to fit your hunting skills! This incentive program, launched in January of 2019, rewards researchers based on the total number of valid P1 submissions that they have found. The P1 Warriors program consists of stacking badges on Researcher profiles, quarterly blog callouts, and swag.
To qualify for the P1 Warrior Program a researcher must meet the following criteria:
To qualify for the P1 Warrior program, researchers need to submit valid P1 vulnerabilities. As you increase your count of valid P1 submissions you qualify for a progressive tier of awards. For a current list of tiers and awards check out the list below!
Valid P1s are accepted submissions marked as either
Won’t Fix. This program started on January 1, 2019, and runs continuously. Researchers have the ability to reach new levels without the counter resetting at any point. This program is not retroactive to submissions prior to January 1, 2019.