3 ms·
I'm talking actual confirmation of the issue and acceptance of scoring from someone clearly technical.
by BeefWellington 4y ago
I'm talking actual confirmation of the issue and acceptance of scoring from someone clearly technical.
- bink 4y agoIt's certainly possible. I've handled a bunch of bug bounty programs and sometimes submissions come in at just the right time and attract just the right attention. It's not a reasonable expectation for the average submission.
- BeefWellington 4y agoIt depends on your targets, IME. Huge companies? Yep, you'll get a "thanks for telling us" from a bigger bug bounty program and then not hear anything for weeks to months. For small- and mid-sized companies that do bug bounties (of which there seem to be fewer and fewer these days as a percentage) you can definitely wind up submitting directly to the right people and get really quick response times.