Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PayPal on Creating Strong Relationships with Security Researchers

hackerone.com | research | #bug-bounty | #community | #program-management | #cvss | #security-researchers | #paypal

Summary

PayPal's bug bounty team has awarded over $6 million to some 3,000 hackers since 2012, and shares lessons on researcher relationships: open feedback, transparency, and objective CVSS-based rewards.
Published
Collected

original ↗

Related coverage

  1. ‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting (yeswehack.com)
  2. A Payment Platform for Security Researchers—No Bug Bounty Program Required (hackenproof.com)
  3. How Security Researchers and Bug Bounty Programs Can Build Lasting Partnerships (hackerone.com)
  4. Open-Xchange Approaches 3 Years of Bug Bounties & 250 Valid Vulnerabilities (hackerone.com)
  5. HTTP Desync Attacks: Request Smuggling Reborn (portswigger.net)
  6. Top 10 Web Hacking Techniques of 2017 - Nominations Open (portswigger.net)

back