Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘Start small – but start now!’ Inside Orange’s Bug Bounty journey with YesWeHack

yeswehack.com | blog | #bug-bounty | #security-training | #crowdsourced-security | #customer-story | #yeswehack | #telecom | #orange

Summary

The telco's Bug Bounty Program manager discusses the value of continuous, crowdsourced testing and a creative way to leverage bug reports for internal training.
Published
Collected

original ↗

Related coverage

  1. ‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty (yeswehack.com)
  2. ‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting (yeswehack.com)
  3. ‘A fraction of the pentest cost’: Lessons from an Asian telco’s Bug Bounty success (yeswehack.com)
  4. ‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU (yeswehack.com)
  5. ‘Bug Bounty has become a security best practice’: Why Ferrero is sweet on crowdsourced testing (yeswehack.com)
  6. Navigating the Waters of Bug Bounty: Lessons Learned from Brittany Ferries’ Live Event (yeswehack.com)

back