Zomato’s First Anniversary with Bug Bounties: Q&A with Security Lead, Prateek Tiwari

Zomato’s security team celebrates the first anniversary of its bug bounty program in a Q&A detailing program outcomes, including 350 valid vulnerability reports, approximately $102,150 paid to 120 hackers, and an average response time of 4 hours; the piece highlights top contributors, lessons learned for running a successful program, and planned updates such as Google Play Security Reward participation, payments on triage, reward increases, and policy changes.