PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Shopify Celebrates 5 Years on HackerOne

hackerone.com | blog | #bug-bounty | #shopify | #milestone | #transparency | #program-anniversary | #disclosure
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Shopify marks five years on HackerOne with over $1 million in bounties, 1,150+ vulnerabilities resolved, and 450+ public disclosures, crediting transparency and a seven-day bounty payout target.
Published
Collected

Related coverage

blog · hackerone.com
Thanks For Being Part Of The Journey to $100 Million in Bounties!
HackerOne co-founders Jobert Abma and Michiel Prins thank the community as lifetime bounties reach $100 million, reflecting on their 2012 start in the Netherlands and the accelerating growth since.
blog · hackerone.com
Transparency Builds Trust
HackerOne discloses a bug bounty report that gave a hacker brief access to data tied to under 5% of customer programs. Co-founder Jobert Abma argues defaulting to disclosure builds industry trust.
vulnerability · hackerone.com
Hacktivity Disclosure for Private Programs
HackerOne launched disclosure for private programs, letting reports be shared with fellow participants rather than the whole world. Over 6,000 reports are already disclosed on Hacktivity.
vulnerability · hackerone.com
Shopify Thanks Over 300 Hackers, Pays $850,000+ to Hackers in Three Years
Shopify marks three years of its bug bounty program: $850,000+ paid to over 300 hackers, 759 vulnerabilities resolved, and a 3-hour average first response time.
blog · hackerone.com
How Shopify Responded When the AI Attack Surface Outpaced Security
Shopify's bug bounty team of under ten analysts faced hundreds of weekly AI-era reports; agentic AI now does first-pass triage, distilling verbose submissions and cutting onboarding time.
blog · hackerone.com
A Decade of Defense: Celebrating Grab's 10th Year Bug Bounty Program
Grab marks ten years of its HackerOne bug bounty program, grown from 23 researchers to 850+, ranking in HackerOne's global Top 20, with scope now covering OVO Indonesia and AI systems.
Back