4 ms·
anyone have data on comparable companies' bug bounty payouts? $10m seems like a drop in the bucket for an org worth nearly $2 trillion, but its hard to say with
by jobs_throwaway 3y ago
anyone have data on comparable companies' bug bounty payouts? $10m seems like a drop in the bucket for an org worth nearly $2 trillion, but its hard to say without seeing what similar-size companies do
- jsnell 3y agoTotally comparable to the amounts paid out by $3 trillion companies: Apple: https://security.apple.com/blog/apple-security-bounty-upgraded/ https://security.apple.com/blog/apple-security-bounty-upgrad... ($20M in 2.5 years) Microsoft: https://msrc.microsoft.com/blog/2023/08/microsoft-bug-bounty-program-year-in-review-13.8m-in-rewards/ https://msrc.microsoft.com/blog/2023/08/microsoft-bug-bounty... ($14M in a year)