---
id: 3593
title: "GitLab's Brian Neel on Secure Software Development and Bug Bounties"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/gitlabs-brian-neel-secure-software-development-and-bug-bounties"
published_at: "2017-06-01T16:00:00Z"
tags: ["bug-bounty", "appsec", "gitlab", "devsecops", "secure-development"]
phying_url: "https://phying.com/item/3593"
lang: en
---

# GitLab's Brian Neel on Secure Software Development and Bug Bounties

## Summary

GitLab security lead Brian Neel discusses why traditional security processes (annual audits, periodic scans, pentests) leave gaps, and how secure coding practices plus a bug bounty program close them by embedding security in development.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2017-06-01T16:00:00Z
- **Original:** https://www.hackerone.com/blog/gitlabs-brian-neel-secure-software-development-and-bug-bounties
- **Phying News:** https://phying.com/item/3593