PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘Start small – but start now!’ Inside Orange’s Bug Bounty journey with YesWeHack

yeswehack.com | blog | #bug-bounty | #security-training | #crowdsourced-security | #customer-story | #yeswehack | #telecom | #orange
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The telco's Bug Bounty Program manager discusses the value of continuous, crowdsourced testing and a creative way to leverage bug reports for internal training.
Published
Collected

Related coverage

blog · yeswehack.com
‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty
Security leaders from Crédit Agricole Personal Finance & Mobility explain how they scoped their bug bounty program, the value of crowd diversity and triage, and plans for AI-related scopes.
blog · yeswehack.com
‘A fraction of the pentest cost’: Lessons from an Asian telco’s Bug Bounty success
An Asian telco's Bug Bounty lessons: crowdsourced testing at 'a fraction of pentest cost' yet finding bugs pentests missed, scaling hunters from 100 to 900, and six best practices.
blog · yeswehack.com
‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU
KOMOJU's Bug Bounty lead on how crowdsourced testing helps the Tokyo payments provider meet regulatory requirements early and harden digital assets, even with limited security resources.
blog · yeswehack.com
‘Bug Bounty has become a security best practice’: Why Ferrero is sweet on crowdsourced testing
Ferrero's security team on its bug bounty journey: scaling to ~130 hunters, handling report spikes, hosting Italy's first live hacking event, and treating crowdsourced testing as best practice.
blog · yeswehack.com
Navigating the Waters of Bug Bounty: Lessons Learned from Brittany Ferries’ Live Event
Brittany Ferries' CISO shares lessons from Battleship, Europe's first maritime live Bug Bounty: preparation, internal concerns and the 48-hour hunt that hardened its online booking platform.
blog · yeswehack.com
Telenor Sweden uses ethical hackers to dial-up cybersecurity to the max
Telenor Sweden partnered with YesWeHack to crowdsource security testing of its critical telecom infrastructure; its head of infosec cites thousands of researchers for a fraction of recruiting costs.
Back