Building a Bug Bounty Program: From the Trenches

on YouTube ↗11m

" summary

Covers how to plan and operate a bug bounty program using concrete elements like scoping, response-time targets, and setting bounty payout ranges; discusses the top 20 pre-launch considerations, data-driven insights about which configurations work or fail, and how to evaluate the program’s ROI versus internal or other external security options.

AI-written summary · about

" related talks

• 52mPractical Tips For Running A Successful Bug Bounty ProgramGrant McCracken, Daniel Trauner · AppSecUSA 2016
• 38mManaging for Success: Maintaining a Healthy Bug Bounty Program Long TermChloe Brown · Black Hat USA 2019
• 53mBounty Operations: Best Practices and Common Pitfalls to Avoid in the First 6-12 MonthsJarek Stanley, Shannon Sabens, Greg Caswell, Josh Jay · Black Hat USA 2019
• 46mHow to run a successful bug bounty programmeShadab Siddiqui · Rootconf 2019
• 50mBug Bounty Programs: Successfully Controlling Complexity and Perpetual TemptationCassio Goldschmidt, Michael Gallagher, Sean Martin, Sean Melia, Michael Stoker · AppSec USA 2017
• 15m"You've Got Your Nice List of Bugs, Now What?" Vulnerability Discovery and ManagementSerge Egelman, Primal Wijesekera, Noura Alomar, Edward Qiu · SOUPS 2020
• 55mYour License for Bug Hunting SeasonCasey Ellis, Jim Denaro · AppSecUSA 2016
• 56mRunning a Bug Bounty Program @ SEEKJulian Berton · NDC Sydney 2017