A Year In HackerOne’s Bug Bounty Program
ID: c6ed2bf0-f6f4-5fd7-8f30-fd8cdc5e7f40
STIX ID: report--c6ed2bf0-f6f4-5fd7-8f30-fd8cdc5e7f40
Feed Name: HackerOne Blog
Threat Score
HackerOne's blog summarizes its Feb 2022–Feb 2023 bug bounty program performance: an 89% rise in submissions, record payouts ($163,134 across 56 findings), average triage/fix/payment times, and examples of reported vulnerabilities (including a notable ImageTragick LFI). The post discusses challenges from acquisitions and third‑party software, engineering responsibilities, and program improvements planned for 2023 to better incentivize and triage researcher submissions.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.