PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

FireBounty x ONYPHE: Surfacing disclosure policies gets a boost

yeswehack.com | blog | #vdp | #vulnerability-disclosure | #tooling | #security-txt | #firebounty | #onyphe
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

FireBounty, the VDP directory behind the VDPFinder plugin, partnered with ONYPHE's internet scanning data to find security.txt files and vastly expand its index of disclosure policies.
Published
Collected

Related coverage

blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
EU Cyber Resilience Act: Manufacturers face 24-hour deadline to report actively exploited vulnerabilities
The EU CRA's vulnerability reporting rules took effect on 11 Sept 2026: makers of digital products must report actively exploited vulnerabilities within 24h, facing fines up to EUR 15M.
blog · yeswehack.com
The prioritisation problem: dealing with a growing vulnerability backlog
YesWeHack explains why CVSS alone cannot set remediation priorities as backlogs grow, and how exploitability, exposure and asset value help rank findings from Bug Bounty, VDP and pentest sources.
blog · yeswehack.com
‘Continuous testing and a real-time understanding of my threat exposure’ – Ooredoo exec on the benefits of Bug Bounty
Ooredoo Qatar's security exec on adopting Bug Bounty and a VDP: continuous scalable testing, leaner vulnerability management and fast results across web, mobile and API assets.
blog · yeswehack.com
DORA now in force: 5 ways YesWeHack’s offensive security platform can bolster your Digital Operational Resilience Act compliance
With DORA now in force for EU financial entities, the article outlines five ways YesWeHack's platform (Bug Bounty, VDP, pentest management, ASM) supports compliance and cyber resilience.
Back