Flexport leverages bug bounty programs to secure their customers highly confidential shipping data

This article is an interview with Flexport's CTO about their HackerOne bug bounty program: why they adopted it, how they handle triage and payouts, how they structured bounty levels and internal buy-in, and lessons learned (including an incident where a scripted probe temporarily took down a slow endpoint, prompting rate-limiting and timeout mitigations). The piece promotes hacker-powered security and HackerOne services rather than reporting a specific ongoing cyber incident.