Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘We wanted a lot of researchers testing our scope’: Entrust’s experience scaling a Bug Bounty Program

yeswehack.com | blog | #bug-bounty | #identity-verification | #customer-story | #scaling | #entrust | #onfido

Summary

Entrust (formerly Onfido) security engineer Luca Sangalli on scaling a Bug Bounty Program: pay-by-results economics, gradually raising rewards, triage benefits and keeping hunters engaged.
Published
Collected

original ↗

Related coverage

  1. ‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting (yeswehack.com)
  2. YesWeHack joins G-Cloud framework for UK public-sector procurement after clearing rigorous evaluation (yeswehack.com)
  3. How to use Codex for Bug Bounty research: explore broadly, validate rigorously (yeswehack.com)
  4. ‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty (yeswehack.com)
  5. ‘Bug Bounty perfectly aligns with DORA requirements’: EU fintech Sogexia reaps benefits of continuous testing (yeswehack.com)
  6. ‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU (yeswehack.com)

back