---
id: 1427
title: "Quantifying the Value of Bug Bounty Programs: ROI, ROM, or Both?"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/quantifying-value-bug-bounty-programs-roi-rom-or-both"
published_at: "2024-09-04 21:49"
tags: ["bug-bounty", "risk-management", "security-metrics", "hackerone", "budget", "roi", "rom"]
phying_url: "https://phying.com/item/1427"
lang: en
---

# Quantifying the Value of Bug Bounty Programs: ROI, ROM, or Both?

## Summary

Traditional ROI struggles to capture proactive security value. HackerOne shows how Return on Mitigation (ROM) complements ROI by comparing breach costs with mitigation costs in bug bounty programs.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2024-09-04 21:49
- **Original:** https://www.hackerone.com/blog/quantifying-value-bug-bounty-programs-roi-rom-or-both
- **Phying News:** https://phying.com/item/1427