Categories
Best Practices New Features YesWeHack News

Showcasing your vulnerability disclosure policy to the world

Every business needs a vulnerability disclosure policy. Thankfully, a growing number of organisations have one. Yet, those programs are not always a click away. Here’s to a unique plugin for both Chrome and Firefox, because making it easy to report issues need not be much work.

Categories
Customers Stories

How Deezer protects their artists & users with Bug Bounty ?

Interview with Romain Lods, Head of Engineering, Deezer

What made you decide to get into Bug Bounty? 

About two years before we launched our Bounty Bug Program, we started internal security audits on our code, which had never been done before at Deezer. These tests allowed us to make a first pass and fix some obvious vulnerabilities.

Categories
Customers Stories

Success stories : Two years of the Blablacar Bug Bounty program

What made you decide to get into Bug Bounty?

Alain Tiemblo, Web Security Lead Engineer, Blablacar : 

We used to rely on “traditional” audits: vulnerability scans, penetration testing, code analysis, etc. which already allowed us to find a lot of things. 

Categories
Hunters Stories

YESWEHACK PROPHILE ON EBODA

Categories
Customers Stories

Case Study – Global Insurance Group

Categories
Vulnerability Coordination YesWeHack News

Fighting malware at the roots

YesWeHack organises bug bounty programmes to disclose and correct vulnerabilities before malicious tools get in. A year after joining the Paris Call, we look back at how have we contributed to furthering peace in the cyberspace.

Categories
Hunters Stories

YESWEHACK PROPHILE ON ZSEANO

Categories
YesWeHack News

YesWeHack EDU, the world’s first Bug Bounty educational platform

YesWeHack, Europe’s leading Bug Bounty company announces the launch of YesWeHack EDU, the world’s first Bug Bounty education platform dedicated to cybersecurity training.

Categories
Customers Stories

INSIDE THE YOUSIGN PRIVATE BUG BOUNTY PROGRAM

Interview with Kevin Dubourg, Bug Bounty Program Manager, Yousign

Categories
Customers Stories

Case study of a Trust Service Provider (TSP) on private Bug Bounty program

What made you decide to launch a Bug Bounty program? 

We mainly launched a bug bounty because of our short delivery cycles. We were used to doing “traditional” pentests once a year, but as we have a lot of changes every month on our scopes, we simply could not wait 12 months for the next audit. Bug Bounty enables us to carry out continuous checks, for each release, update, new delivery, etc.