Jedox’s Journey with HackerOne: A Q&A with CTO, Vladislav Maličević

Jedox's CTO describes the company’s transition to a HackerOne-managed private bug bounty program and how external security researchers helped surface high‑risk issues (such as a potential account takeover, mobile API flaws, and firewall rate-limit bypasses) that were fixed before production. The piece highlights Jedox’s cloud security practices, adherence to OWASP principles, SOC 2/3 attestations and ISO2700x processes, and offers practical advice for scoping and running effective bounty programs.