Code.org Adds a Layer of Always-on Security Testing with Bugcrowd

“We have used other security programs in the past to supplement our internal security audits but these were costly and happened one to two times per year at best. With Bugcrowd, we’ve added an always-on approach to security.”

— Anthony Suarez, Chief Technology Officer, Code.org
Products

Bug Bounty Program

Industry

Technology

  • Challenge

    Code.org utilized other external security programs to supplement robust internal security solutions, but they were found to be costly and lacked sufficient return on investment.

  • Outcomes

    • Consistent program engagement for more quality vulnerabilities
    • Risk reduction, resource efficiency, and workflow integration that helps reduce friction between Security and Development lifecycles

The Value of Student Information

Code.org is a nonprofit dedicated to expanding access to computer science in schools and increasing participation by women and underrepresented minorities. Code.org’s vision is that every student in every school has the opportunity to learn computer science, just like biology, chemistry or algebra. Code.org believes computer science and computer programming should be part of the core curriculum in education, alongside other science, technology, engineering, and mathematics (STEM) courses, such as biology, physics, chemistry and algebra.

While cybersecurity standards and best practices are unique to every industry, those that store personally identifiable information are connected by a universal concern for protecting customer and employee data. EdTech (education technology) is one such
industry. EdTech platforms often provide personalized programming for the individual user, meaning that information initially input about each student is always evolving and expanding. And while great care is taken to collect and store this information, it should also be noted that malicious attackers exert equal effort to find and exploit it. Unfortunately when it comes to data exploitation, the identities of children are far more likely to be targeted for tax, medicare, loan, and other types of fraud. This can have exceptionally long-lasting and sometimes irreversible consequences.

Security at Code.org