Company
Date Published
Author
Bugcrowd
Word count
664
Language
English
Hacker News points
None

Summary

A webinar was recently hosted by InVision, featuring Johnathan Hunt and David Baker discussing the importance of expert program management in crowdsourced security. A managed bug bounty program can provide significant benefits over a self-managed one, including increased efficiency, cost-effectiveness, and reduced time and effort required for triage and validation. With a managed program, organizations can attract a solid crowd of researchers, establish attractive payout ranges, and determine logistics for payouts and researcher communications. InVision's transition from an unmanaged to a managed bug bounty program with Bugcrowd has resulted in an 80% reduction in required time and effort, allowing their application security team to focus on fixing vulnerabilities rather than managing the program. A crowdsourced security approach can provide a more complete security assessment at a lower cost per hour compared to other options.