News for hackers. Stuff that matters.

A comment on Heroku Security Bug Bounty. Parent comment

Re:Heroku Security Bug Bounty by infosectosser on Thursday April 17, 2014 @04:35PM (#7606136)
I would guess it is precisely because BugCrowd is more expensive. They offer a managed program where BugCrowd's employees validate bug reports for participating companies. Speaking from experience, that process can become very time-consuming.
[ Parent | on HN ]
Re:Heroku Security Bug Bounty by EricDeb on Thursday April 17, 2014 @07:53PM (#7607258)
If I were running a startup or even a moderately-sized company, implementing and managing a bug bounty program internally sounds like a headache, and probably would be put off indefinitely. A managed solution like BugCrowd could definitely fill this void.
[ Parent | on HN ]