Mail.ru Group pays out over $1 million in bounties

Mail.ru Group outlines lessons from a six-year bug bounty program, emphasizing flexible scope that covers high-severity issues across its own services and partners, rapid response and communication, and diverse incentives (bounties, grants, promo-code bonuses, and event challenges) to engage researchers; they measure success by critical reports and time-to-fix and plan to invite researchers to help secure an upcoming single-account integration across multiple services.