bug bounty program

Can Bug Bounty Programs Replace In-House Testing?

Large companies have long used bug bounty programs to find vulnerabilities in their software, but these initiatives are becoming increasingly common among individual developers, too. Should a small business use a bug bounty program? And could it even replace their in-house testing? Should it?

Dropbox Joins Bug Bounty ProgramsWith security experts predicting that cyber attacks will not only continue, but escalate, more companies are turning to bug bounty programs to supplement their in-house security initiatives. Dropbox is crowdsourcing security and has announced their new bug bounty program administered by HackerOne.
How Bug Bounty Programs Deliver Savings and SecurityBug bounty programs abound these days and have been leveraged by many organizations hoping to reduce their security vulnerabilities. Looking more closely at these bug bounty programs, several questions emerge in helping shape an organization’s quality assurance strategy.
Yahoo! Ups Bug Bounties after T-Shirt GateJoining the ranks of Google, Facebook, Microsoft, Mozilla, and others, Yahoo! will now offer payments or so-called bounties to developers and security researchers for finding security vulnerabilities in their software and applications. This move is not without some controversy.
Security Researcher Proves Facebook Bug by Hacking Zuckerberg’s WallSecurity researcher Khalil Shreateh discovered a Facebook bug that allowed a hacker to post on anyone’s wall—even one with privacy settings. But Shreateh’s reporting method raised some eyebrows: Shreateh exploited the bug to post on Facebook founder and CEO Mark Zuckerberg’s wall.
Bug Bounty Hunters Can Earn Big RewardsToday’s bug bounty hunters can reap big rewards for tracking down software bugs. So far in 2013, Google has paid nearly $188,000 in bounties and prizes for Chrome and Chrome OS. Pamela Rentz looks at the success of Google's bug bounty program and the popularity of offering rewards for finding bugs.