PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How much is a bug worth? Introducing Bounty Statistics

hackerone.com | vulnerability | #bug-bounty | #benchmark | #hackerone | #cvss | #bounty-statistics
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne launches Bounty Statistics: drawing on 11,000+ awards, programs now see the platform-wide median bounty for each CVSS severity, plus competitive and top-level benchmarks, to calibrate their own rewards.
Published
Collected

Related coverage

blog · hackerone.com
Vulnerability Prioritization Is Broken: Your Mediums Are Chaining Into Criticals
HackerOne argues severity-sorted queues fail against AI-driven chaining: medium and low findings combine into cloud credential compromise, so prioritization must be chain-aware.
tool · github.com
pentestkit: Autonomous Multi-Agent Penetration Testing Framework Powered by LLMs
Demonstrates the frontier of autonomous LLM agents in real-world offensive security, bridging end-to-end vulnerability discovery, rigorous proof-of-exploit verification, and automated reporting.
vulnerability · hackerone.com
How to Accelerate Vulnerability Remediation with Hai
Hai, HackerOne's AI security agent, accelerates find-to-fix by delivering personalized remediation advice, improving vulnerability report quality, and updating CVSS ratings.
vulnerability · hackerone.com
Level Up Your Bug Bounty Effectiveness: 3 Keys to Launch a Successful Program
Launching a successful bug bounty program starts with defining success around risk reduction, not just high CVSS bugs: weigh discoverability, asset discovery, fix validation, and business impact.
vulnerability · hackerone.com
What Is The Common Vulnerability Scoring System (CVSS)
Overview of CVSS, the FIRST-managed open standard for rating vulnerability severity: base metrics like attack vector, complexity and privileges required, and how scores guide patch priorities.
vulnerability · hackerone.com
Vulnerability Remediation | A Step-by-Step Guide
A step-by-step vulnerability remediation guide built on four stages: discover weaknesses through testing, prioritize by risk, remediate via patches or configuration changes, and monitor continuously.
Back