# Bugcrowd: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/bugcrowd/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Bugcrowd at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

Bugcrowd sells pen testing as a service in Standard, Plus and Max tiers across web, mobile, network, API, IoT, cloud and AI targets, with a sample report for the Standard web app test.
- Website: https://www.bugcrowd.com/
- Type: PTaaS platform
- Headquarters: United States
- Services listed: web-app, api, network, cloud, mobile, ai-llm, iot
- Delivery: hybrid. Platform-run pen tests with vetted testers matched by CrowdMatch AI; Max tier pairs methodology-based testing with bug bounty.
- Scope: Web apps yes; APIs yes; Cloud yes; Network yes; Mobile yes; AI apps yes
- Pricing model: custom quote
- Pricing note: No prices on the PTaaS page. Purchase options named: subscription, flat-rate, or pay for impact. External web app and network tests can be bought through AWS Marketplace. Advanced targets (IoT/hardware, crypto, binary, OT, onsite) cost extra on the Plus tier.
- Turnaround: Tests launch in under 72 hours; Standard: launch within 3 business days. (Time to launch, not time to final report.)
- Retesting: Standard: one year of retesting with one report revision, for web apps, networks and APIs only. Plus: same terms for every asset type. Max: same as Plus.
- Sample report: public https://www.bugcrowd.com/products/pen-test-as-a-service/
- Credentials: None with public evidence found
- Compliance mentioned: PCI DSS, HIPAA, GDPR, ISO 27001, SOC 2, DORA
Good fit when: Teams that want a platform-managed pen test with tiered scope and a path to continuous testing or bug bounty.
Tradeoffs: No prices are published. The site claims global CREST accreditation but no CREST directory entry was checked, so no credential is listed. Tiers limit retest scope and asset types.
Last checked: 2026-11-09
Sources:
- Bugcrowd PTaaS: https://www.bugcrowd.com/products/pen-test-as-a-service/ (checked 2026-11-09)
- Bugcrowd homepage: https://www.bugcrowd.com/ (checked 2026-11-09)
- Bugcrowd contact: https://www.bugcrowd.com/about/contact/ (checked 2026-11-09)