4 ms·
You have more experience than I have, obviously, because I'm only involved in running one bounty program on H1. I have not been impressed with H1. Perhaps my o
by RyJones 8y ago
You have more experience than I have, obviously, because I'm only involved in running one bounty program on H1.
I have not been impressed with H1. Perhaps my opinion will change as our program matures, but I am not optimistic. I think there's a lot of space in this market for competition.
I suspect if I was driving as much revenue as you are, they might be more responsive. That's life.
- tptacek 8y agoI mean, I don't know what the problems you had were. I look at H1 like a loot box in a game like, I don't know, Team Fortress 2. Most of the time you get a bunch of lame stuff. Every once in awhile, no matter how you structure your program or how much you pay, you get an excellent bluebird bug. In a twist on how "real" loot boxes work, sometimes you get bullshit that wastes your time. I wouldn't pay a lot of money for access to those loot boxes, but for what they are, they're fine, and I think H1 does a good job of presenting and managing it. I am not a believer in the sales pitch that different bug bounty sites have materially different cohorts of testers. The people you really want to attract probably aren't affiliated with any particular bounty site.