Casey and Serg had worked together in a small consulting firm selling their services one day at a time before starting Bugcrowd.
There are many more bad people hacking computer systems than good ones helping them not get hacked. Each week it seems that some huge institution reveals that their customer’s financial information has been breached or passwords compromised. There was Target earlier this year and Home Depot in the US more recently and hundreds more that never see the light of media attention.
"There are more people hacking companies and their applications than there are people to defend them"
So what do companies do to get help? Smooth sounding salespeople from trusted large organisations sell the time of security penetration testing consultants at a rate of $2000 per day. The client doesn’t know if they’ll be any good and the cost means they can’t hire as many of them as they would like.
The premise of Bugcrowd was to pay for results not hours. Companies like Facebook and Google had pioneered the concept of a bug bounty program where good hackers would responsibly disclose vulnerabilities and the companies would reward them, first with t-shirts and now with serious cash. Bugcrowd would let all the companies in the world who weren’t the size of Facebook and Google run similar bug bounty programs.
The second insight was to help security testers build a reputation. By sitting in the middle of helping security problems get fixed, Bugcrowd could audit and verify if a security consultant was any good or not. The tester could then take that reputation and help win more consulting work, more reliably and not have to work for a big accounting firm. You can see an example here in Pinterest’s bug bounty hall of fame, who use Bugcrowd’s platform to manage their security testing.
"This is a network you want to tap. Startmate is the vehicle to take your business to the next level."
What was once a whacky idea is now a common practice, at least in Silicon Valley, and Bugcrowd has grown very quickly. But not without some heartfelt moments. The company decided to relocate to San Francisco to be nearer to its customers and Serg, the original co-founder, had to make the personal decision to stay in Australia and leave the company. Chris Raethke, who was a founder of another company in the same Startmate batch last year that had failed, joined the company as a founder.
The company’s growth though, meant they were able to raise US$9 million from some great investors like Costanoa, Rally Ventures, Paladin Capital and Square Peg Capital, as well as a bunch of angels.
We filmed an interview with Casey and Chris about their journey so far and the help Startmate gave them in this mini documentary. Applications for Startmate 2016 are open now and we’d love for you to begin your own story. Apply now.
You should follow us on Twitter or read more here.
FOLLOW US ON TWITTER