Talk With an Expert

Bug Bounty Programs: Enterprise Implementation

Bug Bounty Programs: Enterprise Implementation (PDF, 3.70MB)Published: 17 Jan, 2018
Created by:
Jason Pubal

Bug bounty programs are incentivized, results-focused programs that encourage security researchers to report security issues to the sponsoring organization. These programs create a cooperative relationship between security researchers and organizations that allow the researchers to receive rewards for identifying application vulnerabilities. Bug bounty programs have gone from obscurity to being embraced as a best practice in just a few years: application security maturity models have added bug bounty programs and there are standards for vulnerability disclosure best practices. Through leveraging a global community of researchers available 24 hours a day, 7 days a week, information security teams can continuously deliver application security assessments keeping pace with agile development and continuous integration deployments complementing existing controls such as penetration testing and source code reviews.

Bug Bounty Programs: Enterprise Implementation