PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘We opted for Bug Bounty for agility reasons’: European Community of Alsace CISO

yeswehack.com | blog | #bug-bounty | #public-sector | #customer-story | #ciso | #france | #agility
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with Jérémie Piazza, CISO of the European Community of Alsace: why it adopted Bug Bounty in 2022 for agility, its transparent cost model, and use in approving teleservices.
Published
Collected

Related coverage

blog · yeswehack.com
YesWeHack joins G-Cloud framework for UK public-sector procurement after clearing rigorous evaluation
YesWeHack joined the UK's G-Cloud 15 framework after evaluation: public-sector bodies can now procure its bug bounty and agentic continuous pentest services without running tenders.
blog · yeswehack.com
‘Bug Bounty perfectly aligns with DORA requirements’: EU fintech Sogexia reaps benefits of continuous testing
Sogexia's CPTO explains why Bug Bounty 'perfectly aligns' with DORA's continuous-testing requirements, how it compares to pentests and how it keeps pace with rapid product updates.
blog · yeswehack.com
‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU
KOMOJU's Bug Bounty lead on how crowdsourced testing helps the Tokyo payments provider meet regulatory requirements early and harden digital assets, even with limited security resources.
blog · yeswehack.com
‘The unpredictability and creativity of actual threat actors’: Energy giant NOV reaps the rewards of Bug Bounty
Energy giant NOV's security directors on why they launched a Bug Bounty Program, the real-world attacker mindset hunters bring, and plans for a tighter feedback loop to bake security in by design.
blog · yeswehack.com
‘We wanted a lot of researchers testing our scope’: Entrust’s experience scaling a Bug Bounty Program
Entrust (formerly Onfido) security engineer Luca Sangalli on scaling a Bug Bounty Program: pay-by-results economics, gradually raising rewards, triage benefits and keeping hunters engaged.
blog · yeswehack.com
‘Bug Bounty has become a security best practice’: Why Ferrero is sweet on crowdsourced testing
Ferrero's security team on its bug bounty journey: scaling to ~130 hunters, handling report spikes, hosting Italy's first live hacking event, and treating crowdsourced testing as best practice.
Back