Bugcrowd Acquires Mayhem Security to Advance Human‑Augmented AI in Security Testing

Bugcrowd, a crowdsourced cybersecurity leader, has acquired Mayhem Security, a firm specialising in AI‑powered offensive security testing. This acquisition is intended to combine Bugcrowd’s hacker community with Mayhem’s technology to offer continuous, automated vulnerability discovery and remediation across software development and production environments.

Relevance to Aerospace and Defence Systems

Aerospace and defence platforms increasingly rely on complex software stacks, integrated supply chains and interconnected hardware systems — all of which expand the attack surface and heighten cyber risk. The acquisition supports a model of security testing that blends machine speed with human intuition, which can be critical for systems where faults or breaches may lead to safety, mission or national‑security consequences.

Key Capabilities and Platform Integration

Mayhem Security brings autonomous testing capabilities that include continuous penetration testing of APIs, application code and software bills of materials (SBOMs). Integrating these with Bugcrowd’s global hacker community means organisations can apply scalable automated testing early in development, then layer human‑led adversarial testing in deployed systems. This shift supports the movement from reactive to proactive, adaptive security models.

For aerospace OEMs, integrators and defence suppliers, the acquisition signals the increasing expectation for security‑by‑design, continuous assurance and lifecycle vulnerability management. Suppliers will need to consider how automated and human‑augmented security testing frameworks become part of qualification, certification and supply‑chain risk‑management strategies. The convergence of AI capabilities and human testing also suggests that software assurance will increasingly demand hybrid workflows to stay ahead of evolving threats.

With the acquisition in place, Bugcrowd aims to build an adaptive security platform that learns and evolves with the threat environment. For aerospace and defence systems, this could translate into shorter feedback loops for software vulnerabilities, faster remediation cycles, and integrated assurance across software and hardware components. Organisations in these sectors should monitor how such platforms may support certification regimes, risk‑mitigation processes and operational resilience.

Bugcrowd operates a crowdsourced platform where vetted security researchers identify vulnerabilities across customer attack surfaces. Mayhem Security, founded by leading cybersecurity researchers, developed autonomous systems that can discover, prioritise and validate vulnerabilities at machine speed. The joining of these two firms brings together human expertise and machine automation in the pursuit of scalable, continuous security validation.