Sumo Logic Looks to Hacker-Powered Pen Testing for Security and Compliance

Sumo Logic adopted HackerOne bug bounty Challenges to augment traditional pen testing and compliance, quickly discovering multiple vulnerabilities missed by earlier assessments (initial challenge: 5 hackers found 12 issues in 15 days; total program participation reached 93 hackers with 30 reported vulnerabilities, 9 high/critical). The program also uncovered a social engineering weakness that could have allowed an attacker to receive emails and request document access, which was remediated; the article is a case study promoting hacker-powered security rather than a technical incident disclosure.