Choose a partnership, not a plan
BUGSTRIKE grows with your program - from a first disclosure policy to a global bug-bounty operation. Researchers are always free; organizations invest in the programs, controls, and recognition they need.
Everything, grouped by what it does for you
| Capability |
|---|
| 🗂 Program Management |
Public programs & VDP |
Private & invite-only programs |
Active programs |
Scope assets |
| 🤝 Team & Operations |
Team seats |
Human-gated triage |
Managed triage |
Risk & performance analytics |
| 🔌 Integrations & Governance |
API access |
Audit log export |
SSO / SAML |
| 🏅 Recognition & Branding |
Verifiable recognition credentials |
Recognitions / month |
Custom branding (themes, videos, signatures) |
| 🎧 Support |
Community support |
Priority support |
Need regulated data regions or fully-managed programs? Talk to our team →
Enterprise-grade by design
The commitments behind every BUGSTRIKE partnership - the same platform whether you're a startup or a government.
Tenant isolation by default
Row-level security separates every organization's data at the database - not just the application.
Escrow-backed rewards
Bounties are reserved in escrow before triage, so researchers trust they'll be paid.
Humans decide
AI assists triage; every accept, reward, and payout is confirmed by a person with maker-checker controls.
Coordinated disclosure
Workflows aligned to ISO/IEC 29147 & 30111 for responsible, professional disclosure.
Frequently asked
How does billing work?⌄
Plans are activated by our team after you request one - pick a plan, and we'll send payment instructions (invoice, wire or card) and activate it. Annual billing saves two months versus monthly.
Do researchers pay anything?⌄
Never. Researchers use BUGSTRIKE free forever and keep 100% of their bounties. Plans are only for organizations running programs.
Can I run a recognition-only program?⌄
Yes. You can offer verified recognition credentials instead of (or alongside) cash rewards. Program cards show the reward model to researchers upfront.
What happens if I hit a plan limit?⌄
Core security workflows - receiving reports, communicating with researchers, resolving and closing - are never blocked. Limits apply to scale, automation, branding and advanced analytics, with a clear upgrade path.
Can I change plans later?⌄
Anytime. Request an upgrade from Settings; our team confirms it and your new capabilities unlock immediately on activation.
Is my data isolated and secure?⌄
Every organization's data is isolated at the database level (row-level security), encrypted in transit and at rest, with a full audit trail. See our security posture for details.
Still have questions? Talk to our team →