PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Best is Yet To Come: DOD Awards New Hack the Pentagon Contract to HackerOne

hackerone.com | blog | #bug-bounty | #government | #hackerone | #department-of-defense | #dod | #hack-the-pentagon | #government-security | #dds | #contract
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The DoD's Defense Digital Service expanded Hack the Pentagon, awarding HackerOne a new contract for private bounties on sensitive internal systems after 5,000+ valid vulnerabilities in two years.
Published
Collected

Related coverage

blog · hackerone.com
Security@ 2018: Oath, DoD Highlight Value in Bringing Bug Bounties to Life
At Security@ 2018, Oath CISO Chris Nims, DDS's Reina Staley, and hacker Frans Rosén discussed how in-person events strengthen bug bounty programs; Oath alone paid $2M in bounties over six months.
blog · hackerone.com
Bringing Private-sector Security into the U.S. Government [Security@ Recaps]
Security@ panel with Michael Chung (DDS) and Jacob Kaplan-Moss (18F) on importing private-sector security practices; Hack the Pentagon found 138 bugs in 4 weeks vs 30 in 3 years.
blog · hackerone.com
Hack The Pentagon Turns One on HackerOne
Hack the Pentagon's first year: 3,000+ vulnerabilities resolved—2,837 via the DoD's disclosure policy across ~40 components—with hackers earning $300,000+ in bounties from 50+ countries.
blog · hackerone.com
HACK THE PENTAGON AGAIN - AND AGAIN
After the success of its Hack the Pentagon pilot, the U.S. Department of Defense expands its bug bounty efforts and picks HackerOne and Synack for crowdsourced vulnerability discovery and disclosure.
blog · hackerone.com
What Was It Like To Hack the Pentagon?
Behind the scenes of Hack the Pentagon: the U.S. government's first bug bounty drew its first report within 13 minutes, accepted 1,400+ hackers and resolved 138 valid vulnerabilities over 24 days.
blog · hackerone.com
Hack the Pentagon Bug Bounty Program Launches on HackerOne
The U.S. Department of Defense partners with HackerOne to launch Hack the Pentagon — its first bug bounty — as vulnerability disclosure becomes best practice far beyond the software industry.
Back