‘An efficient way to uncover vulnerabilities’: Doctolib's five years in Bug Bounty

This interview with Doctolib security leadership outlines the evolution and practices of their bug bounty program—covering scope expansion to patient and practitioner platforms, an increased maximum bounty (€25,000), collaborative triage with YesWeHack, three special high-reward scenarios for critical findings, and a production "panic button" for researchers—presenting an informational overview rather than reporting any security incident.