‘The red team’s security skills have increased considerably’: Bug Bounty at Bancolombia

## Executive Summary: This interview with Lucas Zuluaga Pérez outlines Bancolombia Group’s Bug Bounty Program (launched October 2021), describing rapid scaling (from a few sites and 5 hunters to ~30 sites and hundreds of hunters), the program’s benefits to red team skills and overall security posture, key success factors (senior management support, engagement of technology teams, collaboration with YesWeHack), and advice to start small and scale scope and rewards.