PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

5 Hacker-Powered Trends You Need to Know About

hackerone.com | vulnerability | #bug-bounty | #government | #trends | #benchmarks | #security-report
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Five hacker-powered security trends: 41% of new bug bounties launch outside tech, 77% of programs get their first report within 24 hours, and public disclosures rose 46% year over year.
Published
Collected

Related coverage

blog · hackerone.com
Key Findings From The Hacker-Powered Security Report: It’s Not Just For Tech (1 of 6)
Key finding #1: over 40% of bug bounty programs launched in 2016 came from outside tech — governments, media, finance and retail all grew, with transport and retail each passing $1M in bounties paid.
vulnerability · hackerone.com
Key Findings From The Hacker-Powered Security Report: Vulnerability Disclosure Policies (5 of 6)
Key finding #5: 94% of top public companies still lack known vulnerability disclosure policies, unchanged since 2015 despite federal recommendations; as everything connects, VDPs are table stakes.
vulnerability · hackerone.com
Security Risk Assessment Report - Key Facts
HackerOne distills its research into 100 hacker-powered facts: financial services saw a ~1,000% jump in compromised records, healthcare faces 3x more SQL injection, and 94% of large firms lack VDPs.
vulnerability · hackerone.com
Key Findings From The Hacker-Powered Security Report: Responsive Programs Attract Top Hackers (3 of 6)
Key finding #3: programs fastest at acknowledging and resolving reports attract the best hackers and most repeat submissions; retail pays bounties ~32 days after a report on average.
vulnerability · hackerone.com
Key Findings From The Hacker-Powered Security Report: Security Responsiveness is Improving (2 of 6)
Key finding #2: time to first response improved to six days in 2017 from seven in 2016, and 77% of programs get their first report within 24 hours; fast communication keeps hackers engaged.
vulnerability · hackerone.com
The Hacker-Powered Security Report: Insights from Over 800 Programs
The Hacker-Powered Security Report draws on 800+ programs, 50,000 resolved vulnerabilities and 600+ interviews: 94% of the Global 2000 lack disclosure policies and critical bounties average $1,923.
Back