PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Pentesting Beyond Compliance: A Tool to Improve Your Security Posture

hackerone.com | blog | #bug-bounty | #compliance | #security-strategy | #webinar | #pentest
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Sumo Logic and Dropbox leaders discuss moving pentesting beyond a SOC 2 and ISO 27001 checkbox, pairing it with bug bounties to feed a holistic, continuously improving security strategy.
Published
Collected

Related coverage

blog · hackerone.com
5 Learnings From A Conversation With OP Financial Group's CISO And @mrtuxracer
HackerOne CEO Marten Mickos discusses SolarWinds and phishing defenses with OP Financial Group CISO Teemu Ylhäisi and hacker Julien Ahrens (@mrtuxracer), stressing transparency as security's future.
blog · hackerone.com
Security Engineers by Day, Hackers by Night – An Interview with Two of Singapore’s Top Ethical Hackers
Singapore security engineers Kaung Htet Aung (@ris) and Samuel Eng (@samengmg) discuss hacking part-time while holding full-time security roles, and how each side sharpens the other.
blog · hackerone.com
Human vs. Machine: Three-Part Virtual Series on the Human Element of AppSec
HackerOne announces a three-part virtual series on the human element of AppSec: automation scales scanning, but human ingenuity remains essential to counter attackers and catch what machines miss.
blog · hackerone.com
Hacker-Powered Data - Security Weaknesses and Embracing Risk with HackerOne
HackerOne webinar data from 1,400 bug bounty programs ranks XSS, improper authentication and information disclosure among the most rewarded weakness types, many absent from the OWASP Top 10.
blog · hackerone.com
Verizon Media Webinar Recap: Attack Surface Visibility & Reducing Risk
Verizon Media's Chris Holt explains how The Paranoids turn triaged hacker reports into SDLC-wide improvements, from quick fixes to new test cases, libraries, design controls and requirements.
blog · hackerone.com
Cloud Security Alliance Webinar Recap: Avoid the Breach with Shopify’s Andrew Dunbar
Shopify's VP of Security Engineering Andrew Dunbar explains how standardized tooling, automation and Hack Days help a small security team scale, and why vendor risk and visibility matter.
Back