PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Hacker-Powered Security Report: Insights from Over 800 Programs

hackerone.com | vulnerability | #bug-bounty | #research | #enterprise-security | #benchmarks | #security-report
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The Hacker-Powered Security Report draws on 800+ programs, 50,000 resolved vulnerabilities and 600+ interviews: 94% of the Global 2000 lack disclosure policies and critical bounties average $1,923.
Published
Collected

Related coverage

vulnerability · hackerone.com
Key Findings From The Hacker-Powered Security Report: Vulnerability Disclosure Policies (5 of 6)
Key finding #5: 94% of top public companies still lack known vulnerability disclosure policies, unchanged since 2015 despite federal recommendations; as everything connects, VDPs are table stakes.
vulnerability · hackerone.com
5 Hacker-Powered Trends You Need to Know About
Five hacker-powered security trends: 41% of new bug bounties launch outside tech, 77% of programs get their first report within 24 hours, and public disclosures rose 46% year over year.
vulnerability · hackerone.com
Security Risk Assessment Report - Key Facts
HackerOne distills its research into 100 hacker-powered facts: financial services saw a ~1,000% jump in compromised records, healthcare faces 3x more SQL injection, and 94% of large firms lack VDPs.
vulnerability · hackerone.com
Key Findings From The Hacker-Powered Security Report: Responsive Programs Attract Top Hackers (3 of 6)
Key finding #3: programs fastest at acknowledging and resolving reports attract the best hackers and most repeat submissions; retail pays bounties ~32 days after a report on average.
vulnerability · hackerone.com
Key Findings From The Hacker-Powered Security Report: Security Responsiveness is Improving (2 of 6)
Key finding #2: time to first response improved to six days in 2017 from seven in 2016, and 77% of programs get their first report within 24 hours; fast communication keeps hackers engaged.
blog · hackerone.com
Better than Cyber Monday: Ecommerce and Retail Edition of The Hacker-Powered Security Report
The Hacker-Powered Security Report's ecommerce and retail edition: programs doubled two years running, critical bounties run 80% above cross-industry levels, retailers rank third in bounties paid.
Back