Bugcrowd
This application is used to receive notifications from Bugcrowd to a Slack channel to enable your workflow and help keep you secure. You can configure what notifications you get whether you want to see all the action, or only know when a vulnerability is ready for review.This application requires a Crowdcontrol account which is available at tracker.bugcrowd.com.
Permissions
Bugcrowd will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Bugcrowd
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Bugcrowd's data retention policy is compliant with SOC2, ISO27001, and ISO27017.
Data archiving and removal policy
Bugcrowd's data archival/removal policies are compliant with SOC2, ISO27001, and ISO27017.
Data storage policy
Bugcrowd stores data in accordance to SOC2, ISO27001, ISO27017, and the NIST standard.
Data center location(s)
United States
Data hosting details
Cloud hosted with encrypted backups.
Data hosting company
AWS
App/service has sub-processors
no
Certifications & compliance
ISO/IEC-27001 certification
ISO/IEC-27017 attestation
Data deletion request procedure
A request can be sent to any employee, support, security@bugcrowd, or our general council, asking for data removal. Employees will then raise an internal request to the required engineering team, creating a ticket for our audit trail. The engineering team will seek the approval of our platform security team, prior to removing the data. Upon gaining that approval, the data will be removed programatically.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2020-12-01
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Most SSO providers, including Okta, OneLogin, etc.
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@bugcrowd.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no