3 ms·
You would create your bounty program through them. The hackers would register with HackerOne and follow their process. In my opinion, that is much safer than
by LinuxBender 8y ago
You would create your bounty program through them. The hackers would register with HackerOne and follow their process. In my opinion, that is much safer than creating your own program if you don't already have a modest sized legal, compliance and security teams.
- jamieweb 8y agoRight yeah that's what I was thinking. The problem is that the process of creating a HackerOne bounty program can take a short while to get to the stage where you can invite hackers - if you have an active hacker on the line like OP does, that could be too long of a wait.
- LinuxBender 8y agoAdvise them you are looking into creating your bug bounty program and kindly ask them to wait while you get things set up.