Next Generation Penetration Testing for Instructure

This document is a case study detailing Instructure's transition from traditional penetration testing to a more innovative approach using Bugcrowd's Next Gen Pen Test Program. Instructure, known for its cloud-based Learning Management System, Canvas, sought to enhance its security posture by adopting a crowdsourced assessment model that uncovers significantly more critical vulnerabilities. The case study outlines how Bugcrowd's managed testing service provides access to a diverse pool of skilled researchers, allowing for a more thorough evaluation of the Canvas application. It explains the collaborative efforts between Instructure's security team and engineering staff, facilitated by Bugcrowd's Crowdcontrol bug tracking platform, to ensure vulnerabilities are effectively identified and remediated. The document emphasizes the importance of this new approach in maintaining security for Instructure's users and highlights the ongoing investment in Bugcrowd programs to further strengthen their security measures.