PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[Guest Post] Atlassian Adopts Bug Bounty Safe Harbor to Further Enable Researchers

bugcrowd.com | research | #bug-bounty | #bugcrowd | #case-study | #vulnerability-disclosure | #guest-post | #safe-harbor | #legal | #atlassian | #disclose-io
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Atlassian adopts a safe harbor clause in its Bugcrowd bounty rules, promising no legal action against good-faith researchers, after rewarding nearly 400 vulnerabilities worth $400,000 since 2017.
Published
Collected

Related coverage

research · bugcrowd.com
[GUEST POST] Standardizing Legal Safe Harbor for Security Research
Guest author Amit Elazari argues many bug bounty and VDP programs still lack legal safe harbor, calling for standardized language so researchers can test and disclose without legal exposure.
research · hackerone.com
A Safer Future for Security Research: Landmark Moves in Portugal and the UK
Portugal's new Article 7 safe harbor and the UK's proposed Computer Misuse Act defence mark major progress in protecting good-faith security research and coordinated vulnerability disclosure.
vulnerability · hackerone.com
What Does Belgium’s New Legal Framework On Hacking Mean For Me?
Belgium's new law lets ethical hackers test any Belgian company without prior permission—a safe-harbor milestone—though mandatory central notification and approval of disclosures could weaken it.
blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
research · bugcrowd.com
Atlassian’s CISO tells the story of his journey from hacker to security executive
Atlassian CISO Adrian Ludwig traces his journey from the NSA to security leadership, arguing modern security problems are organizational and prioritizing the right fixes beats fixing everything.
research · bugcrowd.com
[Guest Post] The next era of Bug Bounty at Pinterest
Pinterest's product security team reviews its Bugcrowd program: 150+ valid reports and $35,000 paid since 2015, VRT-based rewards, and newly increased bounties across all severity tiers.
Back