PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

LINE on Securing the Application Development Lifecycle with Bug Bounties

hackerone.com | blog | #ai-security | #bug-bounty | #web3 | #appsec | #japan | #hackerone | #sdlc | #line
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

LINE Corporation's appsec engineer explains how the Japanese messaging giant, with 167 million monthly users, embeds its HackerOne bug bounty program across the development lifecycle.
Published
Collected

Related coverage

blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · netspi.com
A Checklist for Application Security Program Maturity
A phased checklist for building AppSec maturity: keep practices current with SDLC and DevOps changes, benchmark against industry data, and use roadmaps to prioritize remediation.
blog · netspi.com
Build Strong Relationships Between Development and Application Security Teams to Find and Fix Vulnerabilities Faster
Bridging the DevSecOps divide: with 71% of AppSec pros citing developers who skip early security work, the post urges empathy and shared incentives between development and security teams.
blog · netspi.com
Four Application Security Myths – Debunked
Debunks four application security myths—'an AppSec team is optional,' 'we're too small'—and shows how small teams, governance, and security champions programs can embed security into the SDLC.
blog · netspi.com
Make it Easy on the Development Team
NetSPI examines why development and application security teams clash over deadlines and findings, offering five steps to make security testing participation easier and less adversarial for developers.
blog · netspi.com
Building an Application Security Program from Scratch: Part 1
Kicks off a series on building an application security program, emphasizing policies, standards, and procedures as the foundation before tooling, with placement guidance in existing portfolios.
Back