How REI Strengthens Security with HackerOne’s Global Security Researcher Community

REI senior application security engineer Isaiah Grigsby describes how REI matured its application security through a private-to-public bug bounty and vulnerability disclosure program using HackerOne, outlines in-scope assets (primarily rei.com), emphasizes focus areas like authentication, authorization, injection and business logic flaws, and offers advice on goals, communication, and continuous collaboration with the researcher community to strengthen security.