Bugcrowd Leans Into AI Security and Public-Sector Growth With FedRAMP, Carahsoft Deal

Bugcrowd spent the week sharpening its focus on fast-growing cybersecurity segments, highlighting new offerings around AI risk management while pushing deeper into the U.S. public sector. The company also underscored vertical momentum in financial services and continued investment in engineering capacity in India.

Multiple LinkedIn updates framed AI as an “unspoken” risk area where traditional tools struggle to assess nuanced threats in large language models and AI-driven systems. Bugcrowd is promoting its crowdsourced security model for real-world testing across the AI stack, aiming to uncover novel LLM exploits and validate defenses from infrastructure to generated output.

The firm paired this positioning with educational content on “securing AI with confidence,” targeting security leaders who are balancing rapid AI adoption with unclear risk visibility. If enterprises continue to allocate dedicated budgets to AI security testing, these capabilities may enhance Bugcrowd’s differentiation against conventional vulnerability assessment vendors.

In the public sector, Bugcrowd emphasized a 40% rise in targeted attacks on government agencies and a 151% surge in vulnerability submissions, signaling heavier cyber pressure on U.S. entities. The company linked these trends to its FedRAMP Moderate Authorization and highlighted case studies involving CISA, the DoD’s Chief Digital and Artificial Intelligence Office, and the Minnesota Secretary of State.

Bugcrowd also announced a distribution partnership with Carahsoft, which will act as Master Government Aggregator for its FedRAMP-authorized platform. Through Carahsoft’s contract vehicles such as NASA SEWP V, OMNIA Partners, and E&I Cooperative Services, government customers can more easily procure bug bounty, VDP, penetration testing, and red teaming services.

These moves could lower procurement friction and support deeper penetration into federal, state, and local budgets, potentially increasing recurring revenue and lengthening contract duration. FedRAMP-backed deployments may also reinforce Bugcrowd’s standing versus rivals seeking similar government-focused growth.

Beyond government, Bugcrowd is targeting financial services firms that face expanding attack surfaces and rising regulatory scrutiny. The company is promoting continuous penetration testing to provide ongoing visibility into vulnerabilities and help banks and other institutions strengthen their compliance narratives.

To support product development and platform scale, Bugcrowd is recruiting Staff and Senior Software Engineers in India, with an emphasis on cloud-native, API-first architecture and security domain expertise. The hiring push suggests continued investment in its core technology stack to serve growing demand across AI, public sector, and financial services markets.

Overall, the week’s updates portray Bugcrowd as leaning into AI-specific security, regulated public-sector work, and high-value verticals while expanding its engineering bench, potentially positioning the company for more durable growth in crowdsourced cybersecurity services.