PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

"Triage was world class": Bug Bounty success story from risk-management giant DNV

yeswehack.com | blog | #bug-bounty | #risk-management | #triage | #customer-story | #roi | #dnv
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

DNV Bug Bounty story: growing invited hunters from 20 to 80 sparked 55 reports and 24 payouts worth €9,000 within 18 months; George Medhurst calls YesWeHack's triage 'world class'.
Published
Collected

Related coverage

blog · yeswehack.com
‘The collective knowledge ATG gets is huge’: cyber chief on Betting brand’s Bug Bounty story
Interview with Erik Täfvander, cyber chief at Swedish betting brand ATG: why Bug Bounty proved more productive than pentesting, and lessons from optimising its program since 2021.
blog · yeswehack.com
‘No cheaper way of getting security testing’: financial services Bug Bounty success story
Finance-sector case study: Bug Bounty proved ~90% cheaper than pentesting, complements internal testing on internet-facing assets, and began with a VDP after two good-faith bug reports.
blog · yeswehack.com
‘An efficient way to uncover vulnerabilities’: Doctolib's five years in Bug Bounty
Doctolib's CISO Cedric Voisin and Paul Marty reflect on five years of Bug Bounty: from a limited patient-side scope to public programs, a €25,000 maximum bounty and a 'panic button' for hunters.
blog · yeswehack.com
'ROI is easy to justify’: Bug Bounty success story from a luxury goods retailer
Luxury goods retailer case study: 31 valid vulnerabilities across five heavily pentested apps in year one of its private Bug Bounty program — an ROI its security chief called 'easy to justify'.
blog · yeswehack.com
‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty
Security leaders from Crédit Agricole Personal Finance & Mobility explain how they scoped their bug bounty program, the value of crowd diversity and triage, and plans for AI-related scopes.
blog · yeswehack.com
They said AI would kill Bug Bounty. The data says otherwise
YesWeHack argues frontier AI models are amplifying, not killing, Bug Bounty: AI floods teams with findings that need human triage and prioritisation, while hunters already use AI to find bugs faster.
Back