PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘Large amount of knowhow’: Why Thüringer Aufbaubank harnesses Bug Bounty to bolster customer trust

yeswehack.com | blog | #bug-bounty | #pentesting | #compliance | #customer-story | #trust | #banking
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with Jürgen Krug, software engineering head at German development bank Thüringer Aufbaubank: Bug Bounty complements compliance-driven pentests with hunters' 'large amount of knowhow'.
Published
Collected

Related coverage

blog · yeswehack.com
‘The red team’s security skills have increased considerably’: Bug Bounty at Bancolombia
Q&A with Bancolombia red teamer Lucas Zuluaga Pérez: in a year the bank's Bug Bounty program scaled from 5 hackers on 2 sites to 50 on 30 — and the red team's security skills grew with it.
blog · yeswehack.com
Why pentests cause security debt
New features ship, dependencies update, new APIs are added… and all the while, despite your pentest program, security debt mounts up.
blog · yeswehack.com
Pentests are dead. Long live pentests.
Traditional pentests have created a cottage industry of painful admin. So what needs to change?
blog · yeswehack.com
‘Bug Bounty perfectly aligns with DORA requirements’: EU fintech Sogexia reaps benefits of continuous testing
Sogexia's CPTO explains why Bug Bounty 'perfectly aligns' with DORA's continuous-testing requirements, how it compares to pentests and how it keeps pace with rapid product updates.
blog · yeswehack.com
‘When we ask for help, it’s instant’: Banco Galicia on expanding vulnerability discovery and speeding up remediation
Banco Galicia's security leads on launching a Bug Bounty program — 'an eternal pentest' complementing internal red teams — and how YesWeHack's fast triage support accelerates remediation.
blog · yeswehack.com
‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU
KOMOJU's Bug Bounty lead on how crowdsourced testing helps the Tokyo payments provider meet regulatory requirements early and harden digital assets, even with limited security resources.
Back