Bugcrowd External Attack Surface Management

bugcrowd.com

Web

Visit bugcrowd.com

Spec score 8.0 #9 of 33 in Vulnerability Management Software

Spec sheet

Purpose: Savant Vista provides ongoing visibility into an organization’s external attack surface and helps identify and score risks.Read 10 Oct 2026 · bugcrowd.com
Intended users: The product page describes use cases including shadow IT discovery, M&A and subsidiary risk assessment, third-party exposure monitoring, executive and brand protection, and compliance and audit readiness.Read 9 Oct 2026 · bugcrowd.com
Integrations: Vista links findings from Bugcrowd security testing programs, including bug bounties, penetration tests, and Vulnerability Disclosure Programs, to affected assets.Read 10 Oct 2026 · docs.bugcrowd.com
Support: Vista documentation directs customers with questions about their current asset limits to create a support ticket.Read 10 Oct 2026 · docs.bugcrowd.com
Headquarters: San Francisco, California, United States; Sydney, AustraliaRead 28 Sep 2026 · bugcrowd.com
Founded: 2012Read 28 Sep 2026 · bugcrowd.com
Account requirement: Adding primary domains and configuring scanning requires Bugcrowd organization owner or admin permissions.Read 10 Oct 2026 · docs.bugcrowd.com
Asset discovery: It discovers externally reachable assets associated with supplied domains, including subdomains, IP addresses, APIs, and services.Read 10 Oct 2026 · docs.bugcrowd.com
Asset management: Users can set asset criticality, group assets by business unit or environment, and assign assets to Bugcrowd security programs.Read 10 Oct 2026 · docs.bugcrowd.com
Documented limits: The documentation specifies a maximum of 5 primary domains for vertical discovery, 250 domains from two-pass horizontal discovery, and weekly vulnerability scans for 10 managed assets; former Informer customers have higher limits.Read 9 Oct 2026 · docs.bugcrowd.com
Exposure assessment: Automated assessments detect CVEs, missing patches, misconfigurations, weak encryption protocols, and default credentials.Read 10 Oct 2026 · bugcrowd.com
Exposure scans: Automated scans identify CVEs mapped to CVSS scoring, missing patches, misconfigurations, weak encryption, outdated protocols, and default credential risks.Read 9 Oct 2026 · bugcrowd.com
Finding workflow: Scan findings flow into the Bugcrowd Security Inbox, where teams can review evidence, prioritize exposures, and track remediation progress.Read 9 Oct 2026 · bugcrowd.com
Findings workflow: Scan findings flow into the Bugcrowd Security Inbox with CVSS scoring, vulnerability details, and supporting evidence.Read 10 Oct 2026 · bugcrowd.com
Offensive testing: Teams can place Vista assets into Bug Bounty, PTaaS, Red Team as a Service, or Vulnerability Disclosure Programs to validate exploitability.Read 9 Oct 2026 · bugcrowd.com
Related service: An active Bugcrowd Bug Bounty or Vulnerability Disclosure Program is recommended, but not required, for configuring vulnerability scanning to that program.Read 10 Oct 2026 · docs.bugcrowd.com
Requirements and support: Adding primary domains and configuring scans requires Bugcrowd organization owner or admin permissions, and users with limit questions are directed to Bugcrowd Support.Read 9 Oct 2026 · docs.bugcrowd.com
Risk mapping: Vista links findings from Bugcrowd bug bounty, penetration testing, and Vulnerability Disclosure Program services to affected assets.Read 9 Oct 2026 · docs.bugcrowd.com
Risk prioritization: Assets are evaluated based on risk and importance, and scheduled vulnerability scans prioritize assets based on risk score and asset age.Read 10 Oct 2026 · bugcrowd.com
Scope limit: Savant Vista discovers external, publicly routable assets; internal or non-publicly reachable assets are out of scope.Read 10 Oct 2026 · docs.bugcrowd.com
Security and compliance: Bugcrowd states that its platform has FedRAMP Moderate authorization to operate and that it has been assessed for SOC 2 Security, Availability, and Confidentiality pillars.Read 10 Oct 2026 · bugcrowd.com
Testing services: Teams can send high-risk assets to Bug Bounty, PTaaS, Red Teaming, or VDP programs to validate exploitability.Read 10 Oct 2026 · bugcrowd.com

Plans and prices

Savant Vista Priced on request Up to 5 primary domains for vertical discovery · 250 domains from two-pass horizontal discovery · Weekly vulnerability scans for 10 managed assets · Former Informer customers have higher limits Read 10 Oct 2026 · docs.bugcrowd.com

Every Bugcrowd External Attack Surface Management plan and price →