Hunters and Gatherers: A Deep Dive into the World of Bug Bounties
Bug bounty program managers and researchers discuss submission quality, triage dynamics, and strategies for maturing bug bounty programs.
Summary
Dynamics of the Bug Bounty Ecosystem
A panel of experienced program managers and security researchers examines the evolving relationship between bug bounty hunters and corporate security teams.
Enhancing Submission Impact and Quality
Hunters share strategies for providing clear reproduction steps and business impact analysis, ensuring reports are quickly prioritized by triage analysts.
Managing and Maturing Bounty Programs
Program managers provide actionable recommendations for organizations looking to scale bug bounty programs while managing report volume and internal engineering bandwidth.
Future Trends in Vulnerability Crowdsourcing
Panelists explore the impact of emerging technologies and automated AI tooling on the future trajectory of crowdsourced security testing.
Related talks
Creator Stage·59 min
Nikhil Shrivastava · Charlie Waterhouse
Shares insights from ten years of bug bounty hunting, focusing on bug chaining strategies and collaboration between hunters and triage teams.
Creator Stage·47 min
Richard Hyunho Im · Denis Smajlović
Examines friction between security researchers and vulnerability triagers, offering actionable strategies to resolve severity disputes and improve collaboration.
Creator Stage·59 min
Gabriel Nitu · Jay Dancer · Ryan Nolette · Goshak
Leaders from major enterprise bug bounty programs discuss triage operations, researcher relationships, reward structures, and scaling challenges.