Company
Date Published
Author
Bugcrowd
Word count
381
Language
English
Hacker News points
None

Summary

Twilio has successfully run a public bug bounty program for two and a half years, engaging with security researchers from around the world through various methods, including increasing rewards to boost testing activity. The program has received over 1200 submissions and paid out over $50,000, highlighting Twilio's commitment to product security and their ability to improve their vulnerability finding capabilities while freeing up resources for other areas of the business. Through a collaborative approach with Bugcrowd, Twilio has formed meaningful relationships with top researchers and learned valuable lessons about the effectiveness of crowdsourced testing in enhancing their product security initiatives.