PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Costa Coffee prepares for global expansion with bug bounty program

hackerone.com | blog | #bug-bounty | #customer-story | #hackerone | #retail | #costa-coffee
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Coffee chain Costa Coffee launched a private bug bounty program on HackerOne ahead of global expansion, with security architect Matt Adams citing continuous testing to match agile and CI/CD practices.
Published
Collected

Related coverage

blog · yeswehack.com
‘Our businesses are reassured that we’re protecting their activities’: Les Mousquetaires CISO on leveraging live hacking events
Q&A with Fabrice Bru, CISO at French retail group Les Mousquetaires: why it held a live hacking event at leHACK, and how its Bug Bounty program grew from 10 hunters on intermarche.com to 80.
blog · yeswehack.com
'ROI is easy to justify’: Bug Bounty success story from a luxury goods retailer
Luxury goods retailer case study: 31 valid vulnerabilities across five heavily pentested apps in year one of its private Bug Bounty program — an ROI its security chief called 'easy to justify'.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
blog · hackerone.com
CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments
This coverage gives security teams current context for monitoring, validation, and remediation.
Back