bio

Casey is the founder of Bugcrowd and co-founder of The disclose.io Project. He is a 20+ year veteran of information security who spent his childhood inventing things and generally getting technology to do things it isn't supposed to do. Casey pioneered the Crowdsourced Security as-a-Service model, launching the first bug bounty programs on the Bugcrowd platform in 2012, and co-founded the disclose.io vulnerability disclosure standardization project in 2014 prior to its launch in 2018.

He’s an active member of the Cyber Threat Intelligence League, w00w00, and the Hacking Policy Council, and the Election Security Research Fourm, and has personally advised the US White House, Department of Defense, Department of Homeland Security/CISA, the Australian and UK intelligence communities, and various US House and Senate legislative cybersecurity initiatives, including preemptive cyberspace protection ahead of the 2020 Presidential Elections, The US National Cyber Strategy, and a variety of policies and EO’s relating to security research and artificial intelligence.

Casey, a native of Sydney, Australia, is based in the San Francisco Bay Area.

Professional Experience

I currently serve as founder and advisor to Bugcrowd, co-founder of The disclose.io Project, and advisor to a variety of other startups in cybersecurity, AI, and vulnerability research.

I started in cybersecurity as a penetration tester in the early 2000s, before moving to solutions architecture and technical sales. In 2008 I formed the Tall Poppy Group and began my journey as a career entrepreneur.

My practical experience ranges from startups and not-for-profits to governments and multinationals, where I’ve specialized in troubleshooting and bridging gaps between the technical and business aspects of information security.

In 2012, I pioneered the crowdsourced-security-as-a-service model by founding and launching the first program on Bugcrowd, which has gone on to raise 80M USD of venture capital and transformed the security assessment industry.

I hold three patents [11019091, 10972494, and 20200076847] and have contributed to a variety of academic papers and books.

Community and Policy Activism

Two years after founding Bugcrowd I started disclose.io, an open-source project which promotes vulnerability disclosure program and safe-harbor adoption, with the goal of reforming anti-hacking law from the ground up to protect those who hack in good faith.

I'm an active advocate for the rights of good-faith cybersecurity research, including acting as amicus curae to the Supreme Court, and advising DOJ and the Senate and House Judiciary Committee around Computer Fraud and Abuse Act reform, contributing the the CFAA reforms seen in 2020 and 2022.

I'm active in the CTI Cyber League, w00w00, Rapid7 Cyber Policy Working Group, and the US Election Security Advisory Council, IT-ISAC Election Security Research Forum, and have contributed to Federal and State-level election security policy in the USA as part of the CISA/DHS #protect2020 initiative, an well as contributing extensively to state and national cybersecurity policy in Australia through DoHA, ASD, and ACSC, and the UK through the NCSC.

Media and Speaking

I’m an experienced keynote speaker and have presented at DEF CON, Black Hat USA, RSA Conference, Techcrunch DISRUPT, Shmoocon, ENISA Incibe, Usenix ENIGMA, Derbycon, SOURCEConf, AISA, AusCERT, and many others.

I’ve also had the opportunity to provide plenty of media commentary on a variety of cybersecurity, national security, information warfare and entrepreneurship subjects, with quotes in most major media outlets in the United States, United Kingdom, and Australia. A list of press quotations, interviews, podcasts, and papers I’ve contributed to or been featured in can be found here.

Headshots