PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mail.ru Group pays out over $1 million in bounties

hackerone.com | blog | #bug-bounty | #cloud | #partnership | #vulnerability-disclosure | #scope | #program-management | #mail-ru-group
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Mail.ru Group has paid over $1 million in bounties over six years. Its security advisor explains why flexible scope, rewarding partner bugs, and open communication drive program success.
Published
Collected

Related coverage

blog · hackerone.com
Bug Bounty or Bust! Crafting Your Security Page
A guide to crafting a bug bounty program's security page: clearly scoping in- and out-of-scope assets, setting bounty and response expectations, and building trust that attracts top hackers.
blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
vulnerability · hackerone.com
What is your program’s Scope?
HackerOne launches structured Scope management: programs list Assets (attack surfaces) under its severity taxonomy, shown on profiles and report forms so hackers know what is in and out of scope.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackerone.com
FanDuel’s Liam Somerville on Prioritising Researchers as an Extension of the Security Team
FanDuel's seven-person security team treats bug bounty researchers as an extension of itself. The program has resolved about 85 vulnerabilities and paid over $35,000, says Liam Somerville.
blog · hackerone.com
The Journey to 100% Responsive Programs
HackerOne platform update: 84% of active programs now respond within 5 business days and triage within 10, stale reports were cleaned up without penalties, and reputation is awarded at triage.
Back