PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hack The Pentagon Turns One on HackerOne

hackerone.com | blog | #bug-bounty | #vulnerability-disclosure | #government | #hackerone | #dod | #hack-the-pentagon
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Hack the Pentagon's first year: 3,000+ vulnerabilities resolved—2,837 via the DoD's disclosure policy across ~40 components—with hackers earning $300,000+ in bounties from 50+ countries.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackerone.com
The Best is Yet To Come: DOD Awards New Hack the Pentagon Contract to HackerOne
The DoD's Defense Digital Service expanded Hack the Pentagon, awarding HackerOne a new contract for private bounties on sensitive internal systems after 5,000+ valid vulnerabilities in two years.
blog · hackerone.com
Bringing Private-sector Security into the U.S. Government [Security@ Recaps]
Security@ panel with Michael Chung (DDS) and Jacob Kaplan-Moss (18F) on importing private-sector security practices; Hack the Pentagon found 138 bugs in 4 weeks vs 30 in 3 years.
blog · hackerone.com
HACK THE PENTAGON AGAIN - AND AGAIN
After the success of its Hack the Pentagon pilot, the U.S. Department of Defense expands its bug bounty efforts and picks HackerOne and Synack for crowdsourced vulnerability discovery and disclosure.
blog · hackerone.com
What Was It Like To Hack the Pentagon?
Behind the scenes of Hack the Pentagon: the U.S. government's first bug bounty drew its first report within 13 minutes, accepted 1,400+ hackers and resolved 138 valid vulnerabilities over 24 days.
blog · hackerone.com
Hack the Pentagon Bug Bounty Program Launches on HackerOne
The U.S. Department of Defense partners with HackerOne to launch Hack the Pentagon — its first bug bounty — as vulnerability disclosure becomes best practice far beyond the software industry.
Back