Bugcrowd

Bugcrowd is a crowd-sourced security platform. Bugcrowd services provide customers with the the ability to: onboard, launch, and scale Bug Bounty Programs, connect and maintain healthy relationships with external security researchers, validate and manage incoming vulnerability reports, and pay researchers.

In order to integrate Bugcrowd with Relyance AI you will need a Basic Auth Username and Basic Auth Password using the Legacy API.

In Bugcrowd:

1. Login to your Bugcrowd account.
2. Under you user menu at the top right-hand corner select ' API Credentials '.
3. Enter an application name for your Relyance integration and click create credentials.
4. Afterwards, you'll see a success message that looks something like this:
5. Copy down HTTP Basic Authentication Username and HTTP Basic Authentication Password.
6. Now that the API credentials have been created, you will need to set the ' Default version' to ' Legacy '.

In the Relyance AI application:

1. Login to your Relyance account.
2. Navigate to the Settings (bottom-left corner).
3. Select Integrations.
4. Search and locate the Bugcrowd integration card and click on it.
5. Click on the Add Connection button on the top right
6. Provide a meaningful name for the integration and click on the Add button
7. In the Overview section, select the integration features you wish to enable for the integration, review the Scope and Permission, and Endpoint details and click on Continue. For more details, see Integration Features
8. In the Connection section, provide the appropriate values and click on Continue,

9. In the Authentication section, provide the values for Basic Auth username and Basic Auth Password fields
10. If the Data Inspection check box is checked from step 7, In the Data Inspection section, provide the appropriate values and click on Continue Minimum Confidence Level: This property adjusts the sensitivity of the Data Inspection feature. Lower likelihoods (e.g., unlikely) offer more coverage but may produce false positives, while higher sensitivity (e.g., very likely) provides greater accuracy but less coverage.

11. Review the configuration summary from the Completion section and click on Finish.
12. Confirm the integration Status reflects Connected

Manage this integration with Terraform

Connections for this integration can be managed as code with the Relyance Terraform provider. Non-secret fields go in auth.params; secret fields go in auth.secrets_wo, which is write-only — never stored in Terraform state. Rotate secrets by bumping auth.secrets_wo_version.

resource "relyance_integration_connection" "bugcrowd" {
  vendor = "bugcrowd"
  name   = "<your connection name>"

  auth = {
    method = "username-password"
    params = {
      username = "<username>"
      data_storage_location = "us"
    }
    # Secret fields are write-only: sent to Relyance, never stored in state.
    secrets_wo = {
      password = var.bugcrowd_password
    }
    secrets_wo_version = 1
  }

  scans = { "data-inspection" = { enabled = true } }
}