Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How much is a bug worth? Introducing Bounty Statistics

hackerone.com | vulnerability | #bug-bounty | #benchmark | #hackerone | #cvss | #bounty-statistics

Summary

HackerOne launches Bounty Statistics: drawing on 11,000+ awards, programs now see the platform-wide median bounty for each CVSS severity, plus competitive and top-level benchmarks, to calibrate their own rewards.
Published
Collected

original ↗

Related coverage

  1. Vulnerability Prioritization Is Broken: Your Mediums Are Chaining Into Criticals (hackerone.com)
  2. Access Denied (hackerone.com)
  3. The Road to Top 1: How XBOW Did It (xbow.com)
  4. How to Accelerate Vulnerability Remediation with Hai (hackerone.com)
  5. Level Up Your Bug Bounty Effectiveness: 3 Keys to Launch a Successful Program (hackerone.com)
  6. What Is The Common Vulnerability Scoring System (CVSS) (hackerone.com)

back