PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘Bug Bounty has become a security best practice’: Why Ferrero is sweet on crowdsourced testing

yeswehack.com | blog | #bug-bounty | #crowdsourced-security | #customer-story | #live-hacking | #romhack | #ferrero
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Ferrero's security team on its bug bounty journey: scaling to ~130 hunters, handling report spikes, hosting Italy's first live hacking event, and treating crowdsourced testing as best practice.
Published
Collected

Related coverage

blog · yeswehack.com
YesWeHack and Ferrero inaugurate Italy’s first live hacking event
YesWeHack and Ferrero staged Italy's first live hacking event at RomHack in Rome: 50+ ethical hackers competed and Ferrero's security team praised the collaboration.
blog · yeswehack.com
Navigating the Waters of Bug Bounty: Lessons Learned from Brittany Ferries’ Live Event
Brittany Ferries' CISO shares lessons from Battleship, Europe's first maritime live Bug Bounty: preparation, internal concerns and the 48-hour hunt that hardened its online booking platform.
blog · yeswehack.com
‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU
KOMOJU's Bug Bounty lead on how crowdsourced testing helps the Tokyo payments provider meet regulatory requirements early and harden digital assets, even with limited security resources.
blog · yeswehack.com
‘Our businesses are reassured that we’re protecting their activities’: Les Mousquetaires CISO on leveraging live hacking events
Q&A with Fabrice Bru, CISO at French retail group Les Mousquetaires: why it held a live hacking event at leHACK, and how its Bug Bounty program grew from 10 hunters on intermarche.com to 80.
blog · yeswehack.com
‘Start small – but start now!’ Inside Orange’s Bug Bounty journey with YesWeHack
The telco's Bug Bounty Program manager discusses the value of continuous, crowdsourced testing and a creative way to leverage bug reports for internal training.
blog · yeswehack.com
Walk me through Open My Heart – Live Bug Bounty event with Lazada
A walkthrough of 'Open My Heart', YesWeHack's first Singapore Live Bug Bounty with Lazada at HITBSecConf 2022, and how the e-commerce giant scaled its program from 20 hunters to 40,000+ researchers.
Back