PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘The collective knowledge ATG gets is huge’: cyber chief on Betting brand’s Bug Bounty story

yeswehack.com | blog | #bug-bounty | #triage | #interview | #customer-story | #yeswehack | #betting
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Interview with Erik Täfvander, cyber chief at Swedish betting brand ATG: why Bug Bounty proved more productive than pentesting, and lessons from optimising its program since 2021.
Published
Collected

Related coverage

blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty
Security leaders from Crédit Agricole Personal Finance & Mobility explain how they scoped their bug bounty program, the value of crowd diversity and triage, and plans for AI-related scopes.
blog · yeswehack.com
‘An efficient way to uncover vulnerabilities’: Doctolib's five years in Bug Bounty
Doctolib's CISO Cedric Voisin and Paul Marty reflect on five years of Bug Bounty: from a limited patient-side scope to public programs, a €25,000 maximum bounty and a 'panic button' for hunters.
blog · yeswehack.com
"Triage was world class": Bug Bounty success story from risk-management giant DNV
DNV Bug Bounty story: growing invited hunters from 20 to 80 sparked 55 reports and 24 payouts worth €9,000 within 18 months; George Medhurst calls YesWeHack's triage 'world class'.
blog · yeswehack.com
Boosting E-Commerce Security: PrestaShop's Success with YesWeHack's Public Bug Bounty Program
Interview with PrestaShop's senior core developer on going public with its YesWeHack bug bounty program, citing vulnerability discovery, researcher reach and customer trust.
Back