\n<\/p>\n
Bugcrowd<\/a> \u2014 the startup that taps into a database of half a million hackers to help organizations like OpenAI<\/a> and the U.S. government<\/a> set up and run bug bounty programs, cash rewards to freelancers who can identify bugs and vulnerabilities in their code \u2014 has picked up a big cash award of its own to grow its business further: an equity round of $102 million.<\/p>\n General Catalyst is leading the investment, with previous backers Rally Ventures and Costanoa Ventures also participating.<\/p>\n Bugcrowd has raised over $180 million to date, and while valuation is not being disclosed, CEO Dave Gerry said in an interview it is \u201csignificantly up\u201d on its last round back in 2020, a $30 million Series D<\/a>. As a point of comparison, one of the startup\u2019s bigger competitors, HackerOne, was last valued at $829 million in 2022<\/a>, according to PitchBook data.<\/p>\n The plan will be to use the funding to expand operations in the U.S. and beyond, including potentially M&A, and to build more functionality into its platform, which \u2014 in addition to bug bounty programs \u2014 also offers services including penetration testing and attack surface management, as well as training to hackers to increase their skiilsets.<\/p>\n That functionality is both of a technical but also human nature.<\/p>\n Gerry jokingly describes Bugcrowd\u2019s premise as \u201ca dating service for people who break computers\u201d but in more formal terms, it is built around a two-sided security marketplace: Bugcrowd crowdsources coders, who apply to join the platform by demonstrating their skills. The coders might be hackers who only work on freelance projects, or people who work elsewhere and pick up extra freelance work in their spare time. Bugcrowd then matches these coders up, based on those particular skills, with bounty programs that are in the works among clients. Those clients, meanwhile, range from other technology companies through to any enterprise or organization whose operations rely on tech to work.<\/p>\n In doing all this, Bugcrowd has been tapping into a couple of important trends in the technology industry.<\/p>\n Organizations continue to build more technology to operate, and that means more apps, more automations, more integrations and much more data is moving around from clouds to on-premises servers, from internal users out to customers, and more. All of that means more opportunities for mistakes, or bugs, in the code \u2014 places where an integration may create a security vulnerability, for example; or simply result in a piece of coding no longer working as it should \u2014 and a greater need for comprehensive work to identify those gaps.<\/p>\n Recent years have seen a profusion of new security tools, powered by AI, that aim to identify and remediate those gaps in a more comprehensive and automated way. But that still has not replaced the role of human hackers. Those hackers might work in a more manual way, or they might use automation tools to help them in their bug-hunting efforts, but will still have a critical role to play in how that tech might be directed. As computer science continues to see a rise in popularity as a discipline, that\u2019s produced a wider number of smart and technical people in the world who like to rise to that challenge, if not for the intellectual pursuit for the financial one. The most successful bug bounty hunters can make millions of dollars<\/a>.<\/p>\n Gerry said that the startup\u2019s been growing at over 40% annually and is approaching $100 million in annual revenues.<\/p>\n The startup is now mainly headquartered out of San Francisco, after being originally founded in Australia by Casey Ellis, Chris Raethke and Sergei Belokamen (Ellis is still with the company as chief strategy officer. It now has \u201cwell over\u201d 500,000 hackers and is adding around 50,000 hackers annually to that number, Gerry said, and now has some 1,000 customers after adding 200 clients in the last year.<\/span><\/p>\n \u201cCostanoa has watched Bugcrowd grow from an innovative concept for early adopters to being a force multiplier for Fortune 500 companies today,\u201d said Jim Wilson, Partner at Costanoa Ventures, in a statement. \u201cBugcrowd\u2019s leadership team brings together seasoned experts with a deep understanding of cybersecurity trends and a proven ability to navigate the complexities of the industry. This next stage of growth under Dave\u2019s leadership will allow them to expand their product offerings to help security executives get even more value from the crowd. We are excited to continue our partnership with the team to capture the significant opportunities ahead.\u201d<\/p>\n<\/p><\/div>\n