Hack The Army Results Are In

The Hack the Army bug bounty pilot (Nov 30–Dec 21, 2016) engaged hundreds of participants via HackerOne, yielding 416 reports (≈118 unique/actionable) and roughly $100K in bounties; the earliest report arrived within five minutes. The most significant finding was a chained set of flaws — an open proxy plus a vulnerable internal system — that could allow access from a public recruiting site to an internal DoD site; the Army remediation team and Cyber Protection Brigade quickly contained the issue. The post frames the pilot as a success and encourages continued responsible disclosure.