Bug Bounties Help Keepsafe Secure The Data of 50 Million Consumers

Keepsafe CTO Philipp Berner describes the company’s invitation-only HackerOne bug bounty program, why they launched it, and operational lessons learned (active management, fast response, and clarifying program scope). The article summarizes results to date—approximately $5,400 paid across 27 reports—highlights common findings such as unused DNS records that enabled an attacker-style mapping to an old WordPress site, and emphasizes that crowdsourced testing complements internal security work rather than reporting any active breach or exploitation.