Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘An efficient way to uncover vulnerabilities’: Doctolib's five years in Bug Bounty

yeswehack.com | blog | #bug-bounty | #triage | #customer-story | #yeswehack | #healthcare | #doctolib

Summary

Doctolib's CISO Cedric Voisin and Paul Marty reflect on five years of Bug Bounty: from a limited patient-side scope to public programs, a €25,000 maximum bounty and a 'panic button' for hunters.
Published
Collected

original ↗

Related coverage

  1. ‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty (yeswehack.com)
  2. ‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting (yeswehack.com)
  3. ‘The collective knowledge ATG gets is huge’: cyber chief on Betting brand’s Bug Bounty story (yeswehack.com)
  4. "Triage was world class": Bug Bounty success story from risk-management giant DNV (yeswehack.com)
  5. ‘YesWeHack adapted to our needs’: The Bug Bounty story so far for connected health pioneer Withings (yeswehack.com)
  6. Boosting E-Commerce Security: PrestaShop's Success with YesWeHack's Public Bug Bounty Program (yeswehack.com)

back