PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty

yeswehack.com | blog | #ai-security | #bug-bounty | #crowdsourced-security | #triage | #financial-services | #dora | #yeswehack
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Security leaders from Crédit Agricole Personal Finance & Mobility explain how they scoped their bug bounty program, the value of crowd diversity and triage, and plans for AI-related scopes.
Published
Collected

Related coverage

blog · yeswehack.com
They said AI would kill Bug Bounty. The data says otherwise
YesWeHack argues frontier AI models are amplifying, not killing, Bug Bounty: AI floods teams with findings that need human triage and prioritisation, while hunters already use AI to find bugs faster.
blog · yeswehack.com
Scaling Bug Bounty triage in the AI era
How YesWeHack scales Bug Bounty triage as AI floods programs with reports: a six-step workflow pairs targeted AI support with certified experts to validate each submission before it reaches customers.
blog · yeswehack.com
DORA now in force: 5 ways YesWeHack’s offensive security platform can bolster your Digital Operational Resilience Act compliance
With DORA now in force for EU financial entities, the article outlines five ways YesWeHack's platform (Bug Bounty, VDP, pentest management, ASM) supports compliance and cyber resilience.
blog · yeswehack.com
How Bug Bounty and Attack Surface Management can help you comply with the Digital Operational Resilience Act’s upcoming requirements
DORA compliance guide: the EU regulation's five pillars and security-testing duties for financial entities by January 2025 — and how Bug Bounty and Attack Surface Management can help.
blog · jfrog.com
Navigating DORA Compliance: Software Development Requirements for Financial Services Companies
JFrog's DORA guide: as enforcement intensifies through 2026, EU financial firms and their ICT vendors must evidence resilient development—dependency governance, traceability and incident readiness.
blog · wiz.io
DORA Compliance in the Cloud Era: Insights from Deloitte and Wiz
Wiz and Deloitte explain how financial entities can address DORA — governance, ICT risk management, incident reporting — with real-time cloud visibility and automated compliance mapping.
Back