We’re so pleased to announce the finalists for our fourth annual Buggy Awards! These awards recognize a select group of individuals and organizations that have done fantastic work in the crowdsourced security space in the past year and are the epitome of what it means to be an excellent partner. The achievements of top-performing customers and researchers help remind us what is essential to maintaining the health of the community and driving the crowdsourced security industry forward, and Bugcrowd is so grateful to be working with them.

Without further ado, here are this year’s categories and finalists:

Top Program Awards

The Top Program Awards are awarded to companies that are truly committed to both the Bugcrowd researcher community and to running an outstanding bounty program. Finalists are selected based on a combination of platform program metrics as well as Researcher feedback and nominations.

Best Communication

In previous years, the Most Responsive Program award focused solely on the speed with which an organization responded to a triaged report. While taking action quickly is important, this year we also wanted to recognize Program Owners who have made a commitment to providing quality responses and ongoing engagement on the platform. As a result, this year we’ve changed the name of this award to Best Communication.

The finalists in this category are (in alphabetical order):

Researchers’ Choice

Throughout the year we survey our Crowd and ask them to nominate their favorite program (and tell us why it rocks!). While it is important to have a well-rounded program, the ultimate decider of success in this category is the Researcher community.

The finalists in this category are (in alphabetical order):

Program of the Year

Program of the Year recognizes the incredible work that goes into creating a successful bounty program. Based on several variables including reward range, communication, scope breadth, and general participation, this award goes to the most well-rounded program managed by Bugcrowd.

The finalists in this category are (in alphabetical order):

Top Bug Hunter Awards

Our Bug Hunter Awards acknowledge Researchers for contributions of excellence. This ranges from positively impacting the wider security and Bugcrowd communities, as well as traditional recognition for exceptional individual work on bounty programs. Finalists are selected based on a combination of Researcher platform data metrics and nominations by the Bugcrowd Operations team.

Community Champion

The Community Champion category recognizes Researchers who positively influence the wider Bugcrowd community. These contributions may come in the form of being a engagement on social media, contributing to the Bugcrowd GitHub VRT discussions, or by writing valuable reference materials for other Researchers. While these Researchers are all dedicated Crowd members who participate in many Bugcrowd programs, we value their incredible contributions to help level up the Bugcrowd community.

The finalists in this category are (in alphabetical order):

Ambassador Champion

Ambassador Champion recognizes Bugcrowd Ambassadors that have gone above and beyond to educate and spread the word of security testing. Not only do they work tirelessly to help others in the Bugcrowd community, they’re helping hackers in their community. This person embodies the spirit of Bugcrowd and its outreach initiatives.

The finalists in this category are (in alphabetical order):

  • Abartan
  • Coding_Karma
  • plwylie

P1 Warrior

P1 Warrior recognizes Researchers who focus their attention on the most technically severe vulnerabilities, according to the Bugcrowd VRT. They consistently go above and beyond to provide detailed Proof of Concepts, in-depth written reports, and chained attacks.

The finalists in this category are (in alphabetical order):

  • mert
  • mongo
  • Mrpeuch

Rookie of the Year

The Rookie of the Year award is given in recognition of Researchers who joined the Crowd in 2018 and had the best rankings across the following categories for 2018: average technical severity, accuracy, and volume of valid and accepted submissions. 

The finalists in this category are (in alphabetical order):

Most Valuable Hacker

Our final award, the Most Valuable Hacker, is in recognition of veteran Researchers with the best-combined rankings across the following categories for 2018: average technical severity, accuracy, and volume of valid and accepted submissions.

The finalists in this category are (in alphabetical order):

  • HackerHero
  • mongo
  • picklepwns

Congratulations to all our finalists and their achievements this year — it takes a Crowd! We will be back to announce winners in March!