PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Key Findings From The Hacker-Powered Security Report: It’s Not Just For Tech (1 of 6)

hackerone.com | blog | #bug-bounty | #trends | #benchmarks | #security-report | #non-tech
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Key finding #1: over 40% of bug bounty programs launched in 2016 came from outside tech — governments, media, finance and retail all grew, with transport and retail each passing $1M in bounties paid.
Published
Collected

Related coverage

vulnerability · hackerone.com
5 Hacker-Powered Trends You Need to Know About
Five hacker-powered security trends: 41% of new bug bounties launch outside tech, 77% of programs get their first report within 24 hours, and public disclosures rose 46% year over year.
blog · hackerone.com
Better than Cyber Monday: Ecommerce and Retail Edition of The Hacker-Powered Security Report
The Hacker-Powered Security Report's ecommerce and retail edition: programs doubled two years running, critical bounties run 80% above cross-industry levels, retailers rank third in bounties paid.
blog · hackerone.com
Key Findings From The Hacker-Powered Security Report: Bounty Payments Are Increasing (4 of 6)
Key finding #4: the average critical bounty rose 16% to $1,923 in 2017; top programs pay out roughly $50,000 monthly, and 88 bounties above $10,000 were awarded in a year as targets hardened.
vulnerability · hackerone.com
Key Findings From The Hacker-Powered Security Report: Vulnerability Disclosure Policies (5 of 6)
Key finding #5: 94% of top public companies still lack known vulnerability disclosure policies, unchanged since 2015 despite federal recommendations; as everything connects, VDPs are table stakes.
vulnerability · hackerone.com
Security Risk Assessment Report - Key Facts
HackerOne distills its research into 100 hacker-powered facts: financial services saw a ~1,000% jump in compromised records, healthcare faces 3x more SQL injection, and 94% of large firms lack VDPs.
vulnerability · hackerone.com
Key Findings From The Hacker-Powered Security Report: Responsive Programs Attract Top Hackers (3 of 6)
Key finding #3: programs fastest at acknowledging and resolving reports attract the best hackers and most repeat submissions; retail pays bounties ~32 days after a report on average.
Back