- Home
- Vulnerability Management Software
- Bugcrowd External Attack Surface Management
On the recordRead 10 Oct 202622 facts
Bugcrowd External Attack Surface Management
San Francisco, California, United States; Sydney, Australia
Plans and prices
Savant Vista
Priced on request
Up to 5 primary domains for vertical discovery · 250 domains from two-pass horizontal discovery · Weekly vulnerability scans for 10 managed assets · Former Informer customers have higher limits
Read 10 Oct 2026 · docs.bugcrowd.com
On the record
- Account requirement
- Adding primary domains and configuring scanning requires Bugcrowd organization owner or admin permissions.docs.bugcrowd.com · read 10 Oct 2026
- Asset discovery
- It discovers externally reachable assets associated with supplied domains, including subdomains, IP addresses, APIs, and services.docs.bugcrowd.com · read 10 Oct 2026
- Asset management
- Users can set asset criticality, group assets by business unit or environment, and assign assets to Bugcrowd security programs.docs.bugcrowd.com · read 10 Oct 2026
- Documented limits
- The documentation specifies a maximum of 5 primary domains for vertical discovery, 250 domains from two-pass horizontal discovery, and weekly vulnerability scans for 10 managed assets; former Informer customers have higher limits.docs.bugcrowd.com · read 9 Oct 2026
- Exposure assessment
- Automated assessments detect CVEs, missing patches, misconfigurations, weak encryption protocols, and default credentials.bugcrowd.com · read 10 Oct 2026
- Exposure scans
- Automated scans identify CVEs mapped to CVSS scoring, missing patches, misconfigurations, weak encryption, outdated protocols, and default credential risks.bugcrowd.com · read 9 Oct 2026
- Findings workflow
- Scan findings flow into the Bugcrowd Security Inbox with CVSS scoring, vulnerability details, and supporting evidence.bugcrowd.com · read 10 Oct 2026
- Finding workflow
- Scan findings flow into the Bugcrowd Security Inbox, where teams can review evidence, prioritize exposures, and track remediation progress.bugcrowd.com · read 9 Oct 2026
- Integrations
- Vista links findings from Bugcrowd security testing programs, including bug bounties, penetration tests, and Vulnerability Disclosure Programs, to affected assets.docs.bugcrowd.com · read 10 Oct 2026
- Intended users
- The product page describes use cases including shadow IT discovery, M&A and subsidiary risk assessment, third-party exposure monitoring, executive and brand protection, and compliance and audit readiness.bugcrowd.com · read 9 Oct 2026
- Offensive testing
- Teams can place Vista assets into Bug Bounty, PTaaS, Red Team as a Service, or Vulnerability Disclosure Programs to validate exploitability.bugcrowd.com · read 9 Oct 2026
- Purpose
- Savant Vista provides ongoing visibility into an organization’s external attack surface and helps identify and score risks.bugcrowd.com · read 10 Oct 2026
- Related service
- An active Bugcrowd Bug Bounty or Vulnerability Disclosure Program is recommended, but not required, for configuring vulnerability scanning to that program.docs.bugcrowd.com · read 10 Oct 2026
- Requirements and support
- Adding primary domains and configuring scans requires Bugcrowd organization owner or admin permissions, and users with limit questions are directed to Bugcrowd Support.docs.bugcrowd.com · read 9 Oct 2026
- Risk mapping
- Vista links findings from Bugcrowd bug bounty, penetration testing, and Vulnerability Disclosure Program services to affected assets.docs.bugcrowd.com · read 9 Oct 2026
- Risk prioritization
- Assets are evaluated based on risk and importance, and scheduled vulnerability scans prioritize assets based on risk score and asset age.bugcrowd.com · read 10 Oct 2026
- Scope limit
- Savant Vista discovers external, publicly routable assets; internal or non-publicly reachable assets are out of scope.docs.bugcrowd.com · read 10 Oct 2026
- Security and compliance
- Bugcrowd states that its platform has FedRAMP Moderate authorization to operate and that it has been assessed for SOC 2 Security, Availability, and Confidentiality pillars.bugcrowd.com · read 10 Oct 2026
