Bug Bounties

Microsoft has announced the Zero Day Quest, an expanded bug bounty initiative offering $4 million in potential rewards for identifying vulnerabilities in its cloud and artificial intelligence technologies.

The program seeks to incentivize high-impact security research while strengthening collaborations with external researchers.

"Our mission is to help organizations regain control of cyber risks by harnessing the collective ingenuity of the hacker community to outsmart adversaries. This capital provides the resources needed to strengthen our position as the leader of the crowdsourced security market," said Bugcrowd CEO Dave Gerry.

After spending a decade working for appsec vendors, Grant McKracken wanted to give something back. He saw a gap in the market for free or low-cost services for smaller organizations that have real appsec needs, but not a lot of means to pay for it. He founded DarkHorse, who offers VDPs and bug bounties to organizations of all sizes for free, or for...

Bug bounties of up to $1 million are available for researchers who find flaws in the platform.

Aaron was already a skilled bug hunter and working at HackerOne as a triage analyst at the time. What he discovered can't even be described as a software bug or a vulnerability. This type of finding has probably resulted in more security incidents and breaches than any other category: the unintentional misconfiguration. There's a lot of conversati...

An integrated approach to pentesting and bug bounty programs promises to find vulnerabilities that would otherwise get missed.

Higher rewards of up to $250,000 will be given by Google for the discovery of memory corruption flaws in the Chrome browser shown to achieve remote code execution using a non-sandboxed process as part of a more robust vulnerability reward program.