Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Setting the Bar High for Bug Bounty Triage and Validation

bugcrowd.com | vulnerability | #bug-bounty | #vulnerability-management | #bugcrowd | #triage | #validation | #sla

Summary

Bugcrowd outlines its triage standards: every submission gets engineer review, critical issues are answered within a 24-hour SLA, and managed programs delivered 94.76% valid signal in 2017.
Published
Collected

original ↗

Related coverage

  1. Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs (bugcrowd.com)
  2. The hidden cost of agentic pentesting (bugcrowd.com)
  3. ‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty (yeswehack.com)
  4. Stop breaking SLAs: how to patch vulnerabilities before the fix even ships (aikido.dev)
  5. ‘Happy hunters equal happy customers and vice versa’: YesWeHack vulnerability triage chief Adrien Jeanneau on creating a virtuous Bug Bounty circle (yeswehack.com)
  6. 9 rules for a successful first-time Bug Bounty Program (yeswehack.com)

back