4 ms·
I expected the list of platforms to be a list of companies that actually have programs, not a list of companies that offer to manage the program for you...
by chrismeller 6y ago
I expected the list of platforms to be a list of companies that actually have programs, not a list of companies that offer to manage the program for you...
- onionisafruit 6y agoSame, but only because I missed the word “platforms” when I read the title. I don’t know how many companies I would expect to be on a list like that, but certainly more than 45.
- chrismeller 6y agoGranted “platforms” was a weird phrase, but I assumed it was companies operating bug bounty programs because that’s the only thing I would expect to see on HN or care about seeing on HN. If I were looking for a company to host one for me I would have no trouble. 10 seconds on Google, literally.
- TomNomNom 6y agoIf you were a bug bounty hunter and wanted to sign up for as many platforms as possible to maximise your potential scope, this list would be really useful. Seems to me like useful content for hackers, which is what I would expect to see on Hacker News.
- caseyjohnellis 6y agoYeh, these are the different orgs that run programs on behalf of companies. For a list of the orgs running programs there’s about 2,300 of those here (also open-source and a contact work in progress): https://github.com/disclose/diodb https://github.com/disclose/diodb