---
id: 2646
title: "5 Common Mistakes When Running a Bug Bounty Program"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/5-common-mistakes-when-running-bug-bounty-program"
published_at: "2023-10-31T16:50:51Z"
tags: ["bug-bounty", "triage", "best-practices", "program-management", "hackerone", "vulnerability-scoring"]
phying_url: "https://phying.com/item/2646"
lang: en
---

# 5 Common Mistakes When Running a Bug Bounty Program

## Summary

Common bug bounty mistakes include unprepared triage for report volume, weak vulnerability scoring, and an untested attack surface; each mistake is paired with practical fixes.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2023-10-31T16:50:51Z
- **Original:** https://www.hackerone.com/blog/5-common-mistakes-when-running-bug-bounty-program
- **Phying News:** https://phying.com/item/2646