I created Bugbop over the last year now I'm officially releasing it! It’s a platform for teams that want to run their first bug bounty without expensive contracts. I come from a SaaS technical founder background where I ran our program for years. Now I've decided to make something better suited to that niche.
The model is simple: only pay when valid vulnerabilities are found. No ongoing subscriptions. Set budgets to avoid going over. The app's still in the early days but it's working: security bugs are getting paid and bug hunters are getting bounties.
It's using AI to review check if it's in scope, detect duplicates, and set severity (the app doesn't ask reporters because everyone just says "Critical").
I’m interested in feedback from people who’ve run bug bounties, stopped running them, or considered them and decided against it.
ponny•1h ago