skip to Main Content
This website use cookies which are necessary to its functioning and required to achieve the purposes illustrated in the privacy policy. To learn more or withdraw consent please click on Learn More. By continued use of this website you are consenting to our use of cookies.

Posts by Grant McCracken

The Silver Lining

Unprecedented. Surreal. Wild. Dystopian. Unfathomable. Nobody saw this coming - where everyone is hunkering down with a pallet of toilet paper and crossing the street or taking some grand detour - all in an effort to avoid any human contact…

Read More

The Problem with Limited Scope

Attack surface has grown exponentially for many organizations, and with it, their susceptibility to weaknesses. To combat this reality, security teams utilizing crowdsourced security solutions have expanded their program scopes to include more and more of their ever-evolving assets. Notable…

Read More

Setting Up Your Program Reward Ranges

“What reward ranges should I set for my program?”, “How much should I pay for a given finding?”, and “What should my organization’s reward budget be for a successful program?” At Bugcrowd, we hear these questions time and time again…

Read More

Providing Access to your Program: Sharing Isn’t Caring

Over the past year, we’ve spent some time diving into many of the different aspects relating to setting up a successful bug bounty program. Previously we’ve covered setting your scope, and the importance of focus areas, as well as some considerations to make around setting exclusions and provisioning your testing environment. Additionally, we’ve also taken a brief look at reward guidelines and disclosure policies, and how they can be used to both enhance your program and increase visibility.

Read More
Back To Top