Practical Tips For Running A Successful Bug Bounty Program - AppSecUSA 2016

1,286 views · Published 30 November 2016 · 51:50 · Indexed 14 November 2026

Channel: OWASP Foundation · 2016 · Science & Technology

Watch on YouTube

Recorded at AppSecUSA 2016 in Washington, DC
https://2016.appsecusa.org/

If You Can’t Beat ‘Em Join ‘Em: Practical Tips For Running A Successful Bug Bounty Program

Having a bug bounty program is one of the most efficient methods of finding security vulnerabilities today. But, as anyone who has tried to run a bug bounty program knows, it's not a trivial undertaking... As professionals who have helped to manage hundreds of bug bounty programs, we're uniquely positioned to provide advice on how to succeed. Whether you're already running a bug bounty program, are looking to run a bug bounty program, or are a researcher, this talk aims to deepen your knowledge of the subject.

Grant McCracken
Solutions Architect, Bugcrowd
Grant has been with Bugcrowd, a crowdsourced cybersecurity solution, for roughly two years - initially helping process bounty submissions as an Application Security Engineer/Analyst, and later transitioning to his current role of Solutions Architect. 

Daniel Trauner
Daniel Trauner is a Senior Application Security Engineer at Bugcrowd – a crowdsourced cybersecurity solution. He works with (and is sometimes a part of) the thousands of security researchers worldwide who collectively attempt to understand, break, and fix anything that companies will let them. 

-

Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project

More from this channel