PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

$20M in Bounties Paid and $100M In Sight

hackerone.com | vulnerability | #bug-bounty | #vulnerability-management | #hackerone | #milestone | #dod
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne crosses $20 million in bounties paid to a 100,000-hacker community, with 50,000+ vulnerabilities fixed; it credits DoD's Hack the Pentagon as far cheaper than a traditional audit.
Published
Collected

Related coverage

vulnerability · hackerone.com
Aim High...Find, Fix, Win!
Hack the Air Force results: 207 valid vulnerabilities over 25 days, $130,000+ in bounties — DoD's largest challenge, open to hackers from five partner nations, with a first report in under a minute.
vulnerability · hackerone.com
How Federal Agencies Use Vulnerability Disclosure Policies to Level Up Security
Vulnerability disclosure policies are becoming a requirement for federal agencies. The article recaps HackerOne's government work since Hack the Pentagon and five components of an effective VDP.
vulnerability · hackerone.com
Why Every Federal Agency Needs a VDP
A CISA draft directive requires all US federal civilian agencies to publish a vulnerability disclosure policy, following the DoD VDP model that surfaced 12,000+ vulnerabilities in three years.
vulnerability · hackerone.com
8 High-impact Bugs and How HackerOne Customers Avoided a Breach: SQL Injection
This series entry covers SQL injection, fifth most rewarded on HackerOne, with disclosed Starbucks and US DoD reports showing how verbose errors and XML upload endpoints lead to database compromise.
vulnerability · hackerone.com
How the Risk-Averse DoD Learned to Stop Worrying and Love the Hackers
A Security@ 2019 panel traces how the US DoD embraced hackers: its VDP and bounties surfaced 11,000+ valid vulnerabilities, saved taxpayers $64 million in three years and returned roughly 800% ROI.
vulnerability · hackerone.com
U.S. Department of Defense VDP Wins Prestigious 2019 DoD Chief Information Officer Award
The DoD Cyber Crime Center's VDP won the 2019 DoD CIO award for Cybersecurity from 135 nominees, recognizing three years of protecting DoD networks through white-hat researcher submissions.
Back