Upserve Resolves Over 85 Bugs in Two Years Thanks to Hackers

This interview with Upserve’s Information Security Officer outlines the company’s two-year experience running a public bug bounty program on HackerOne (resulting in 85 valid vulnerabilities and $68,000 in bounties), the program’s broad scope, the decision to move from private to public engagement, the positive impact of public disclosures on submissions, and operational advice for hackers and organizations running bounty programs.