Choose a partnership, not a plan
BUGSTRIKE grows with your program - from a first disclosure policy to a global bug-bounty operation. Researchers are always free; organizations invest in the programs, controls, and recognition they need.
Everything, grouped by what it does for you
| Capability | Launch $0/mo | Professional $400/mo | Enterprise $2,000/mo | Elite Custom |
|---|---|---|---|---|
| 🗂 Program Management | ||||
Public programs & VDP Invite the world to help secure you | ✓ | ✓ | ✓ | ✓ |
Private & invite-only programs Curated, confidential testing | - | ✓ | ✓ | ✓ |
Active programs Run several programs at once | 1 | 10 | Unlimited | Unlimited |
Program templates & invitations Launch faster, invite top hunters | - | ✓ | ✓ | ✓ |
| 🤝 Researcher Collaboration | ||||
Human-gated triage AI assists, people decide | ✓ | ✓ | ✓ | ✓ |
In-report messaging Work directly with researchers | ✓ | ✓ | ✓ | ✓ |
Team roles & RBAC Separation of duties, maker-checker | - | ✓ | ✓ | ✓ |
Recognition & award ceremony Honor researchers, build loyalty | ✓ | ✓ | ✓ | ✓ |
| 🛡 Security Operations | ||||
CVSS + CWE tooling & escrow rewards Standardized severity, guaranteed payout | ✓ | ✓ | ✓ | ✓ |
Risk & performance analytics Understand your security posture | - | ✓ | ✓ | ✓ |
SLA policies & monitoring Stay accountable to researchers | - | ✓ | ✓ | ✓ |
Workflow automation & audit logs Scale operations, prove compliance | - | Audit | ✓ | ✓ |
| 🔌 Integrations | ||||
Email & webhooks Notify your own systems | ✓ | ✓ | ✓ | ✓ |
API access Automate everything | - | ✓ | ✓ | ✓ |
Jira · GitHub · Slack · Teams Fits your existing workflow | - | - | ✓ | ✓ |
SSO / SAML Enterprise identity & access | - | - | ✓ | ✓ |
| 🏅 Recognition & Branding | ||||
Verifiable credentials Researchers showcase your recognition | ✓ | ✓ | ✓ | ✓ |
Custom recognition themes & frames Co-brand every award | - | ✓ | ✓ | ✓ |
Intro videos & executive signatures Official, cinematic recognition | - | - | ✓ | ✓ |
Company recognition wall Public proof of your security culture | - | - | ✓ | ✓ |
| 🎧 Support | ||||
Community support Docs & community | ✓ | ✓ | ✓ | ✓ |
Priority support Fast expert help | - | ✓ | ✓ | ✓ |
Technical onboarding Launch with confidence | - | - | ✓ | ✓ |
Dedicated success manager A partner, not a ticket queue | - | - | - | ✓ |
Need governments, regulated data regions, or fully-managed programs? Talk to our team →
Enterprise-grade by design
The commitments behind every BUGSTRIKE partnership - the same platform whether you're a startup or a government.
Tenant isolation by default
Row-level security separates every organization's data at the database - not just the application.
Escrow-backed rewards
Bounties are reserved in escrow before triage, so researchers trust they'll be paid.
Humans decide
AI assists triage; every accept, reward, and payout is confirmed by a person with maker-checker controls.
Coordinated disclosure
Workflows aligned to ISO/IEC 29147 & 30111 for responsible, professional disclosure.
Frequently asked
How does billing work?⌄
Plans are activated by our team after you request one - pick a plan, and we'll send payment instructions (invoice, wire or card) and activate it. Annual billing saves two months versus monthly.
Do researchers pay anything?⌄
Never. Researchers use BUGSTRIKE free forever and keep 100% of their bounties. Plans are only for organizations running programs.
Can I run a recognition-only program?⌄
Yes. You can offer verified recognition credentials instead of (or alongside) cash rewards. Program cards show the reward model to researchers upfront.
What happens if I hit a plan limit?⌄
Core security workflows - receiving reports, communicating with researchers, resolving and closing - are never blocked. Limits apply to scale, automation, branding and advanced analytics, with a clear upgrade path.
Can I change plans later?⌄
Anytime. Request an upgrade or change from Settings; our team confirms it and your new capabilities unlock immediately on activation.
Is my data isolated and secure?⌄
Every organization's data is isolated at the database level (row-level security), encrypted in transit and at rest, with a full audit trail. See our security posture for details.
Still have questions? Talk to our team →