Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mercado Libre’s Journey to a Public Bug Bounty Program

hackerone.com | blog | #bug-bounty | #appsec | #crowdsourced-security | #vulnerability-disclosure | #hackerone | #mercado-libre

Summary

After six years of private programs on HackerOne, Mercado Libre has launched a public bug bounty program, with its AppSec director sharing lessons on scaling crowdsourced security.
Published
Collected

original ↗

Related coverage

  1. Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules (hackerone.com)
  2. Access Denied (hackerone.com)
  3. ‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty (yeswehack.com)
  4. The hidden cost of agentic pentesting (bugcrowd.com)
  5. BlaBlaCar leverages crowdsourced security to secure its millions of users’ data (yeswehack.com)
  6. A Payment Platform for Security Researchers—No Bug Bounty Program Required (hackenproof.com)

back