PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Department of Defense Selects Bugcrowd to ‘Hack the Pentagon’

bugcrowd.com | blog | #bug-bounty | #bugcrowd | #crowdsourced-security | #government | #department-of-defense | #dod | #hack-the-pentagon
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The US Department of Defense awarded Bugcrowd a contract to expand 'Hack the Pentagon,' extending crowdsourced assessments to broader assets including hardware and physical systems.
Published
Collected

Related coverage

blog · hackerone.com
The Best is Yet To Come: DOD Awards New Hack the Pentagon Contract to HackerOne
The DoD's Defense Digital Service expanded Hack the Pentagon, awarding HackerOne a new contract for private bounties on sensitive internal systems after 5,000+ valid vulnerabilities in two years.
blog · hackerone.com
Security@ 2018: Oath, DoD Highlight Value in Bringing Bug Bounties to Life
At Security@ 2018, Oath CISO Chris Nims, DDS's Reina Staley, and hacker Frans Rosén discussed how in-person events strengthen bug bounty programs; Oath alone paid $2M in bounties over six months.
blog · hackerone.com
Bringing Private-sector Security into the U.S. Government [Security@ Recaps]
Security@ panel with Michael Chung (DDS) and Jacob Kaplan-Moss (18F) on importing private-sector security practices; Hack the Pentagon found 138 bugs in 4 weeks vs 30 in 3 years.
blog · hackerone.com
Hack The Pentagon Turns One on HackerOne
Hack the Pentagon's first year: 3,000+ vulnerabilities resolved—2,837 via the DoD's disclosure policy across ~40 components—with hackers earning $300,000+ in bounties from 50+ countries.
blog · hackerone.com
HACK THE PENTAGON AGAIN - AND AGAIN
After the success of its Hack the Pentagon pilot, the U.S. Department of Defense expands its bug bounty efforts and picks HackerOne and Synack for crowdsourced vulnerability discovery and disclosure.
blog · hackerone.com
What Was It Like To Hack the Pentagon?
Behind the scenes of Hack the Pentagon: the U.S. government's first bug bounty drew its first report within 13 minutes, accepted 1,400+ hackers and resolved 138 valid vulnerabilities over 24 days.
Back