Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

10 Years of the GitHub Security Bug Bounty Program

hackerone.com | blog | #bug-bounty | #github | #vulnerability-disclosure | #responsible-disclosure | #hackerone

Summary

GitHub Security's bug bounty program turns 10: over $4 million awarded to researchers, eight years on HackerOne, expanded scope, legal safe harbor, and live hacking events along the way.
Published
Collected

original ↗

Related coverage

  1. Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules (hackerone.com)
  2. Access Denied (hackerone.com)
  3. Our Approach to Coordinated Vulnerability Disclosure (depthfirst.com)
  4. ‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting (yeswehack.com)
  5. The hidden cost of agentic pentesting (bugcrowd.com)
  6. A Payment Platform for Security Researchers—No Bug Bounty Program Required (hackenproof.com)

back