PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacktivity Disclosure for Private Programs

hackerone.com | vulnerability | #product-update | #hackerone | #transparency | #private-programs | #disclosure | #hacktivity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne launched disclosure for private programs, letting reports be shared with fellow participants rather than the whole world. Over 6,000 reports are already disclosed on Hacktivity.
Published
Collected

Related coverage

blog · hackerone.com
Shopify Celebrates 5 Years on HackerOne
Shopify marks five years on HackerOne with over $1 million in bounties, 1,150+ vulnerabilities resolved, and 450+ public disclosures, crediting transparency and a seven-day bounty payout target.
blog · hackerone.com
Transparency Builds Trust
HackerOne discloses a bug bounty report that gave a hacker brief access to data tied to under 5% of customer programs. Co-founder Jobert Abma argues defaulting to disclosure builds industry trust.
blog · hackerone.com
Don’t Believe These 4 Bug Bounty Myths
HackerOne's Laurie Mercer debunks four bug bounty myths: most programs are private, time-boxed Challenges can replace traditional pentests, and public disclosure remains entirely optional.
vulnerability · hackerone.com
Using Bug Bounty Talent Pools to Attract and Maintain Top Talent
Bug bounty programs double as security talent pipelines: Hacktivity and Hacker101 help train researchers, while Shopify and Dropbox hired proven hackers directly from their HackerOne programs.
vulnerability · hackerone.com
8 High-impact Bugs and How HackerOne Customers Avoided a Breach: SQL Injection
This series entry covers SQL injection, fifth most rewarded on HackerOne, with disclosed Starbucks and US DoD reports showing how verbose errors and XML upload endpoints lead to database compromise.
vulnerability · hackerone.com
8 High-Impact Bugs and How HackerOne Customers Avoided a Breach: Privilege Escalation
This series opener explains privilege escalation—vertical versus horizontal per OWASP—ranked fourth most rewarded on HackerOne, with disclosed reports illustrating its potential business impact.
Back