4 ms·
HackerOne, BugCrowd, et al don't appear to make any serious effort to vet reports themselves.
by xmodem 1y ago
HackerOne, BugCrowd, et al don't appear to make any serious effort to vet reports themselves.
- hashstring 1y agoIs that true? I thought you could pay for a H1 service that basically had professionals triaging the vulnerabilities and only pass on the correct ones?
- ycombinatrix 1y agoOur company pays for one of these third party triage services for H1. The quality is seriously lacking. They have dismissed many valid findings.
- hashstring 1y agoAh thank you for the info! From what I understood, the service is also (very) expensive. Wild.