An enterprise bug bounty program vs. VDP: Which is better?
Discovering vulnerabilities in your own software is a full-time task. So, what if you could get crowdfunded help from experienced security research...
Discovering vulnerabilities in your own software is a full-time task. So, what if you could get crowdfunded help from experienced security researchers? Bug bounty programs do just that: provide organizations a helping hand in discovering bugs and vulnerabilities before bad actors can. To help organizations develop their own bug bounty program, author and security researcher John Jackson wrote Corporate Cybersecurity: Identifying Risks and the Bug Bounty Program. "I wanted to make sure everyone understood what goes on in a program and how things should be run," he said.