Case Study: Instructure boosts vulnerability findings with Bugcrowd PTAAS

Instructure sees 5X more vulnerability findings with Bugcrowd

Instructure, the provider of the Canvas learning management system, faced a challenge with their traditional penetration testing approach, which offered limited value and was not a comprehensive method for identifying critical vulnerabilities. To address this, they turned to Bugcrowd and its Penetration Testing as a Service (PTaaS) product for a more thorough, crowdsourced security assessment.

Bugcrowd provided a private, managed program that delivered a high-quality pool of security researchers to test the Canvas application. This approach leveraged the crowd's creativity and broad expertise, moving beyond predefined scenarios. As a result, Instructure experienced a 5X growth in vulnerability findings over traditional security testing. The measurable success led them to invest in additional Bugcrowd programs to further expand their security footprint.

Instructure

Wade Billings

Senior Director of Global IT Services