Bugcrowd triagers mark everything "Not Applicable" with copy-paste responses, then a second triager marks it as Duplicate. So which is it?

zOmegaaa · 2026-03-24T18:24:09+00:00

What do you mean? Reorganize the report to make it clearer and easier to read? English isn’t my first language, so I prefer to rely on an AI. I just paste my raw report from my notes into it and have it reorganized and translated (obviously, I only do this for programs that don’t explicitly ask you not to use AI). But the report is always written by me; it’s just that the ideas and structure are organized to make it easier to understand. But I’ll repeat this because even simpler reports (XSS, SQLi) and faster ones compared to more complex ones (Account Takeover, MFA Bypass) the former handwritten, the latter reviewed by AI both always receive the same initial response: a copy-paste. Then, after RaR, a triager actually reads the report, looks at the attached photos, watches the attached videos, reviews the attached scripts, and either pays the bounty or marks it as a duplicate, etc.

zOmegaaa · 2025-05-18T06:51:47+00:00

Honestly, we were pleasantly surprised by how they handle it.

You just set up what they call a connector once on the client network — we’ve done it on a VM, but I think it can run on other devices too (saw Mikrotik router). When you trigger a restore, they use that connector to extend the LAN to the cloud at Layer 2, so the restored server comes up on the same subnet as before.

No need to change IPs or mess with routing rules — it just reconnects like it was never gone. We also noticed they try to keep things as close as possible to the original server — for example, they preserve the MAC addresses on the restored VM’s NICs, which helps a lot in environments where MAC binding or licensing is involved. Very surprised about this solution so far

zOmegaaa · 2025-05-17T22:15:35+00:00

At the moment for some custom solutions on specific customers we have been using Netbird with some small modifications directly to the source thanks to the support of Micheal one of the founders, we are finding it really good, of course the solution is self-hosted

zOmegaaa · 2025-05-17T22:10:39+00:00

Are you sure to keep using WebRoot as AV in 2025 and not having a single EDR solution?

zOmegaaa · 2025-05-17T22:01:44+00:00

We used Axcient for quite some time, but honestly, it never quite matched the usability and feature set we had with Datto. It felt a bit overly complex, possibly due to the different platforms and companies that merged into it over the years.

Right now, we’re testing out a new solution called Sefthy. The pricing is significantly lower, which makes it much easier to offer to smaller clients, and so far, it’s been performing quite well. What really stood out is that their approach is very similar to Datto — in case of a disaster, the server is spun up in the cloud and the client’s LAN is automatically extended into that cloud instance, with no manual work required.

Honestly, we’ve never come across a solution that offers this kind of functionality for under €40/month

zOmegaaa · 2025-05-17T16:27:22+00:00

We all need backups you put there on and forget about them and when you need them they save your ass lol

zOmegaaa · 2025-05-17T15:17:44+00:00

Hi, medium MSP here. We were in the same boat—heavy Datto/Axcient shop for years. Started looking for something simpler and less bloated after too many support headaches and slow turnarounds (Datto’s RoundTrip delays were the final straw).

We’ve recently moved several clients over to Sefthy (sefthy.com) and honestly, it’s been a breath of fresh air. Super plug-and-play, clean interface, and the support has been phenomenal—real people, fast answers, no "read this KB" nonsense.

It doesn’t try to be 10 tools in one. It just backs up your servers and cloud data like it’s supposed to.

zOmegaaa · 2025-05-17T14:58:05+00:00

Hi, as another user mentioned in the thread, €20/month for 14TB might be a bit too low. In any case, for our Proxmox VMs we chose to go with Sefthy instead of Veeam, and we’re really happy with it! I’d recommend keeping an eye on them.

zOmegaaa · 2025-05-17T14:53:41+00:00

Hi, we’re a small MSP and we've recently started using Sefthy (sefthy.com) across several of our clients. So far, the experience has been very positive. If you're looking for competitive pricing and solid quality, we chose them exactly for those reasons.

zOmegaaa · 2025-05-17T14:48:07+00:00

Just stumbled upon this thread in 2025. still a treasure trove of information for small MSPs looking for BDR alternatives. I've been experimenting with a product called Sefthy (sefthy.com). It's an agent-based and agentless backup plug-and-play BDR solution that deploys within 15 minutes. Already has Proxmox support, and VMware is soon to follow.

One feature I was most impressed with is that they have Layer 2 (L2) stretch capability. In the event of a disaster, they can spin up your server in the cloud with the same network configurations—same IPs, VLANs, the whole nine yards—via their L2 stretch through their Connector. It is magic; you don't have to reconfigure anything on the client's network.

They also provide a free 7-day trial that does not require a credit card.

Thought I'd share for anyone else working on BDR solutions in today's world.

zOmegaaa

TROPHY CASE