PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘Bug Bounty perfectly aligns with DORA requirements’: EU fintech Sogexia reaps benefits of continuous testing

yeswehack.com | blog | #bug-bounty | #continuous-testing | #compliance | #fintech | #dora | #customer-story
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Sogexia's CPTO explains why Bug Bounty 'perfectly aligns' with DORA's continuous-testing requirements, how it compares to pentests and how it keeps pace with rapid product updates.
Published
Collected

Related coverage

blog · yeswehack.com
‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU
KOMOJU's Bug Bounty lead on how crowdsourced testing helps the Tokyo payments provider meet regulatory requirements early and harden digital assets, even with limited security resources.
blog · netspi.com
Pentesting for Third-Party Risk Management
Learn why traditional third-party risk management fails and what CISOs must demand from vendors, including continuous pentesting, to manage third-party risk effectively.
blog · yeswehack.com
Why pentests cause security debt
New features ship, dependencies update, new APIs are added… and all the while, despite your pentest program, security debt mounts up.
blog · yeswehack.com
‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty
Security leaders from Crédit Agricole Personal Finance & Mobility explain how they scoped their bug bounty program, the value of crowd diversity and triage, and plans for AI-related scopes.
blog · yeswehack.com
‘The unpredictability and creativity of actual threat actors’: Energy giant NOV reaps the rewards of Bug Bounty
Energy giant NOV's security directors on why they launched a Bug Bounty Program, the real-world attacker mindset hunters bring, and plans for a tighter feedback loop to bake security in by design.
blog · yeswehack.com
‘We wanted a lot of researchers testing our scope’: Entrust’s experience scaling a Bug Bounty Program
Entrust (formerly Onfido) security engineer Luca Sangalli on scaling a Bug Bounty Program: pay-by-results economics, gradually raising rewards, triage benefits and keeping hunters engaged.
Back