Sponsor Interview

on YouTube ↗01m

" summary

Microsoft Security Response Center describes running a global bug bounty program and hosting a recruitment party that engages dozens of security researchers over two days, fielding specific questions about telemetry, workflows, and breach response playbooks. The session reports concrete asks about how reports are triaged, how patches are prioritized, and how rewards are issued, and notes unexpectedly high participation from women in cybersecurity — a clear signal that outreach and the program’s processes are working.

AI-written summary · about

" related talks

• 45m2014.10.29 - Security@Scale - Katie Moussoris, HackerOneKatie Moussoris · Security @Scale 2014
• 45mThe Good, the Bad, and the Bounty: 10 Years of Buying Bugs at MicrosoftAanchal Gupta, Katie Moussouris · RSA Conference 2024
• 56mRunning a Bug Bounty Program @ SEEKJulian Berton · NDC Sydney 2017
• 45mRunning an efficient bug bounty program and PSIRT... (Garrett McNamara, Jeff Guerra)Garrett McNamara, Jeff Guerra · BSidesSF 2026
• 52mPractical Tips For Running A Successful Bug Bounty ProgramGrant McCracken, Daniel Trauner · AppSecUSA 2016
• 07mLessons learned from running big bug bounty programsKatie Moussouris · O'Reilly Security Conference 2016 - Amsterdam, Netherlands
• 50mTo bounty, or not to bounty? Security@ insights from 500 organizationsAlex Rice · OWASP AppSec California 2016
• 55mYour License for Bug Hunting SeasonCasey Ellis, Jim Denaro · AppSecUSA 2016