Costa Coffee prepares for global expansion with bug bounty program

Costa Coffee has launched a private bug bounty program with HackerOne to augment its existing pentesting and secure its UK and Polish 'Coffee Club' loyalty platforms (web and mobile), with plans to expand coverage to all public-facing assets globally over the next 6–12 months; the program aims to provide continuous testing aligned with agile/CI-CD workflows and to surface vulnerabilities that could expose customer data or harm the brand.