2 ms·
My team runs the bug bounty program for our company. What we get is a lot, lot of garbage reports (with public programs) and we spend a lot of time on basic co
by BrandoElFollito 8y ago
My team runs the bug bounty program for our company.
What we get is a lot, lot of garbage reports (with public programs) and we spend a lot of time on basic communications with people who barely speak English. At some point we had to mention that we acknowledge the reception of each report and if you do not hear from us then it means that it is not accepted.
And then there are the good reports and, boy, some are really neat. We gladly pay for them and keep having many of the hunters coming back.
Making things clear from the start and keepingvyour word makes a long way. Bug bounties are great when well organized and a hell on earth for the unprepared.