SignalFisher
Lucerne continuous security testing program built by the team behind Bug Bounty Switzerland
Quick Overview
| Company | SignalFisher AG |
|---|---|
| Category | Bug Bounty Platforms |
| Headquarters | Lucerne, Switzerland |
| Founded | Not stated |
| EU Presence | Yes - Switzerland (CH) |
| Data Location | Not stated on the pages checked |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Continuous security testing program, adaptive scoping, vetted security researchers, reports and trend analysis, VDP, researcher platform |
| Pricing | Pricing on request |
| Best For | Swiss and DACH regulated companies replacing yearly pentests with a continuous program |
| Replaces | HackerOne, Bugcrowd |
Detailed Review
The site shows a banner saying that Bug Bounty Switzerland is now SignalFisher, and the imprint names SignalFisher AG, Morgartenstrasse 3, 6003 Lucerne, with commercial register number CHE-218.065.572. The three co-founders are named as CEO, COO and CTO.
The company says its roots go back to 2015 and describes its product as a testing program that never stops learning, rather than a classic bounty marketplace.
Scope, Test, Interpret
The vendor splits the program into three steps. Scoping turns business context, regulatory requirements and external threats into a test scope. Testing is done by vetted researchers against the external attack surface. Interpretation provides reports, trend analysis and recommended actions.
The pitch is explicit that one-off pentests age quickly and that classic bounty platforms leave scoping and interpretation to the customer.
Customers and Investors
The site quotes the CISO of Helvetia Baloise Group about a partnership since 2021 and shows Swiss Post and Stadler among customer logos. The about page names Direttissima Growth Partners and Deutsche Beteiligungs AG as growth partners.
The ownership information on the about page is the only source checked, so confirm the shareholder structure with the vendor if it matters to your procurement.
Place in the Category
SignalFisher is closer to a managed testing service than to a self-serve bounty platform. Buyers who want to set their own reward grid and invite researchers themselves will find the model different from YesWeHack or Intigriti.
Limitations to Consider
The pages checked publish no prices, no hosting location and no researcher counts. The offer is positioned as a managed program, so a team that wants a self-serve bounty with its own reward grid gets less direct control. The company is Swiss, so a contract is likely under Swiss rather than EU law; check the governing law in your order form. For an EU-hosted bounty see YesWeHack.
Who Should Use SignalFisher
Regulated Swiss and DACH organisations that want continuous external testing with interpretation of results instead of annual pentests.
Pros and Cons
Pros
- Swiss AG with commercial register number published
- Scoping and interpretation included in the program
- Vetted researchers and in-house experts
- Continuous rather than point-in-time testing
- Named co-founders and advisory board
Cons
- No prices published
- Hosting location not stated
- Managed model gives less control over the reward grid
- Switzerland is outside the EU
Alternatives to SignalFisher
Other European bug bounty platforms worth comparing before you decide:
YesWeHack
France · Paris bug bounty and exposure platform hosted in an EU private cloud
Intigriti
Belgium · Antwerp bug bounty platform with managed VDP and PTaaS
Yogosha
France · Vetted researcher community for pentests and private bounties
Detectify
Sweden · Stockholm attack-surface and application scanner with ethical-hacker payloads
See all European bug bounty platforms or compare them directly against HackerOne on our alternatives page.
Frequently Asked Questions
The site displays a banner stating that Bug Bounty Switzerland is now SignalFisher and links to a press release.
The imprint names SignalFisher AG in Lucerne, Switzerland, with commercial register number CHE-218.065.572.
The vendor argues that bounty platforms leave scoping, planning and interpretation to the customer, and sells a program that covers scoping, testing and interpretation together.