PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘More efficient than a pentest and it generates trust’: TeamViewer’s Bug Bounty story so far

yeswehack.com | blog | #bug-bounty | #pentesting | #vdp | #interview | #customer-story | #teamviewer
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Interview with TeamViewer's Michael Gillig: why Bug Bounty beats pentests in breadth and depth, the VDP-to-public journey since 2021, and rewards that now reach €10,000.
Published
Collected

Related coverage

blog · yeswehack.com
‘No cheaper way of getting security testing’: financial services Bug Bounty success story
Finance-sector case study: Bug Bounty proved ~90% cheaper than pentesting, complements internal testing on internet-facing assets, and began with a VDP after two good-faith bug reports.
vulnerability · yeswehack.com
Vulnerability Disclosure Policy as a first step of GfK’s crowdsourced security strategy
GfK's security team explains why it started with a Vulnerability Disclosure Policy before Bug Bounty, using the VDP as a low-risk first step to build a business case and earn internal trust.
vulnerability · yeswehack.com
Vulnerability Disclosure Policy through the eyes of a bug hunter
An interview with ethical hacker Clement 'SaxX' Domingo on what a Vulnerability Disclosure Policy is, how it differs from bug bounty programs, and why few companies have set one up.
blog · yeswehack.com
Why pentests cause security debt
New features ship, dependencies update, new APIs are added… and all the while, despite your pentest program, security debt mounts up.
blog · yeswehack.com
‘I’m not the kind of person to rely on tooling’: Sn0rkY shares his Bug Bounty story and top tips
French hacker Sn0rkY shares his Bug Bounty methodology, views on AI tooling and advice for hunters in this YesWeHack interview.
blog · yeswehack.com
Pentests are dead. Long live pentests.
Traditional pentests have created a cottage industry of painful admin. So what needs to change?
Back