
YesWeHack
HackerOne
Bugcrowd
Intigriti
Hackrate
Open Bug Bounty
Bug Bounty Hunt
Capture The Bug
Markdrop
BugHerd
Pastel
Webvizio
YesWeHack is a leading Bug Bounty and Vulnerability Management Platform. Founded by ethical hackers in 2015, YesWeHack connects organisations worldwide to tens of thousands of ethical hackers, who uncover vulnerabilities in websites, mobile apps, connected devices and digital infrastructure.
Bug Bounty programs benefit from in-house triage, personalised support, a customisable model and results-based pricing. Clients include ZTE, Tencent, Swiss Post, Orange France and the French Ministry of Armed Forces.
The YesWeHack platform offers a range of integrated, API-based solutions: Bug Bounty (crowdsourcing vulnerability discovery); Vulnerability Disclosure Policy (creating and managing a secure channel for external vulnerability reporting); Pentest Management (managing pentest reports from all sources); Attack Surface Management (continuously mapping online exposure and detecting attack vectors); and โDojoโ and YesWeHackEDU (ethical hacking training).
YesWeHack's services have ISO 27001 and ISO 27017 certifications, and its IT infrastructure is hosted by EU-based IaaS providers, compliant with the most stringent standards: ISO 27001 (+ 27017, 27018 & 27701), CSA STAR, SOC I/II Type 2 and PCI DSS.
Find out more at www.yeswehack.com
YesWeHack
MarkdropNo Markdrop videos yet. You could help us improve this page by suggesting one.
Markdrop's answer:
Markdrop combines powerful visual feedback, screen recording, and developer-ready bug reporting into a single, lightweight tool that feels invisible until you need it. Unlike bloated alternatives, Markdrop is fast, easy to integrate, and built for modern teams who care about speed and clarity with no Chrome extension or signup friction required.
Markdrop's answer:
Affordable, transparent pricing: Markdrop offers all the core features at a fraction of the cost of tools like Markup.io or Pastel.
Designed for devs and designers: Every comment can include logs, screen recordings, and environment data ready for developers to act on.
No friction for users: Share a link and anyone can leave feedback. No browser extensions, no accounts, no hassle.
Fast and privacy-respecting: Lightweight script, GDPR-compliant, and zero tracking bloat.
All-in-one: Combines comments, annotations, bug reporting, and async video so teams donโt need 3 different tools.
Markdrop's answer:
Markdrop is built for:
Founders and indie builders who want fast feedback without complex tools
Designers and PMs collecting client or stakeholder feedback
Developers who want bug reports with context, not vague screenshots
Agencies delivering websites and apps that need client review In short, itโs for lean product teams who value clarity and speed.
Markdrop's answer:
Markdrop was born out of frustration. As a solo founder building multiple products, I (Manuel) kept running into the same feedback pain, long email chains, vague bug reports, and overpriced tools that did too much or too little. So I built what I needed: a clean, no-fuss tool to drop comments directly on a site, see what users saw, and get back to shipping.
Markdrop's answer:
Which are the primary technologies used for building your product?
Frontend: Svelte 5 Backend: Cloudflare Workers, D1, and Durable Objects Database: Wrangler DB (D1) DevOps/Infra: Cloudflare Pages + R2 for static assets and file storage
Markdrop's answer:
Indie founders using Markdrop to launch and iterate faster
Agencies working with clients.
YC applicants using it to get fast design review
No-code builders collecting client feedback inside Webflow
Internal product teams replacing Slack screenshots with structured feedback
Based on our record, YesWeHack seems to be more popular. It has been mentiond 1 time since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
There are many resources online nowadays to learn security. You can do challenges on https://root-me.org, https://www.hackthebox.com/, https://overthewire.org/wargames/, etc. You can participate in security competitions (CTFs), see https://ctftime.org for a list of upcoming events. And finally if you are more interested in web security you can look for bugs on websites and get paid for it by https://hackerone.com... Source: over 3 years ago
HackerOne - HackerOne provides a platform designed to streamline vulnerability coordination and bug bounty program by enlisting hackers.
BugHerd - BugHerd: The Website Feedback Tool for Agencies
Bugcrowd - Harness the largest pool of curated and ranked security researchers to run the most efficient bug bounty and penetration tests
Pastel - Sticky note-based feedback collection tool for live websites
Intigriti - Intigriti is the trusted leader in crowdsourced security, empowering the worldโs largest organizations to find and fix vulnerabilities before cybercriminals can exploit them.
Webvizio - This free website feedback tool & website review software allows managers and teams to collaborate on website revisions in real time. Join for free now!