PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How Elastic Attracts and Retains Top Hackers Without Offering the Highest Bounties

hackerone.com | blog | #bug-bounty | #conference | #case-study | #triage | #program-management | #hacker-engagement | #elastic | #gamification
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Elastic's bug bounty manager Douglas Day explains how competitive scope, quick triage, and gamified challenges attract top hackers without offering the industry's highest bounties.
Published
Collected

Related coverage

blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
vulnerability · yeswehack.com
9 rules for a successful first-time Bug Bounty Program
Nine rules for a successful first Bug Bounty program: clear team roles, a dedicated manager, a detailed brief, efficient triage, transparent payments and integration with internal remediation.
vulnerability · projectdiscovery.io
Securing the distributed perimeter: How Elastic scaled proactive detection with ProjectDiscovery Cloud
Elastic ran ~50,000 servers across AWS, Azure, and GCP and adopted ProjectDiscovery Cloud, scanning 14,500 external assets in under five minutes after outgrowing legacy scanners like BitSight.
blog · hackerone.com
Takeaways from a Conversation Between Hackers and Program Managers
HackerOne's 'Getting Vulnerable' webinar paired GitHub, ServiceNow, and Snap program managers with top hackers: consistent communication keeps hackers engaged, and programs need regular adaptation.
blog · hackerone.com
Level Up Your Bug Bounty Effectiveness, Part II: Operational Areas to Continuously Improve
Part two on bug bounty effectiveness covers daily operations: win over 'anchor' hackers with fast responses and easy test setup, plus automation and actionable insights to keep the program improving.
blog · hackerone.com
How Hackers Can Strengthen Cloud Security for Applications
Elastic's Josh Bressers reflects on how the cloud dissolved perimeter defenses and expanded attack surfaces, and why hacker-powered testing helps address the unknowns that keep security teams honest.
Back