Build an evaluation questionnaire →
Each point is one vendor listed in Bug BountyEach band is a letter of the alphabetFurther out: more about that vendor can be checked independently · how this is measured
No analyst coverage recorded yet
Each point is one vendorTwo arcs: vendors in Bug Bounty, and the partners they integrate with outside itFurther out: more about that vendor can be checked independently · how this is measuredEach line is one integration
3 vendors with at least one tracked CVE, sized by how many. Color = relative volume.About CVE trackingSourced from the public NVD database, matched by vendor name (same data as each vendor's own CVE list). Tracking is capped at 100 CVEs per vendor as a scan guard — no vendor has hit that cap yet. Vendor-level only, not per-product/version — always check the linked NVD record before drawing conclusions about a specific product.