Company
Date Published
Author
Bugcrowd
Word count
248
Language
English
Hacker News points
None

Summary

When a security researcher discovers a bug in software, informing the company is the responsible thing to do, allowing them to fix it. Pinterest has an ongoing program with Bugcrowd to manage reports of valid bugs and provides monetary rewards to researchers who submit them. The program has been successful, rewarding over $35,000 to more than 150 non-duplicate submissions, and recently increased rewards for all tiers of bugs to show continued commitment to responsible disclosure. Researchers can participate in the program by reading the brief and terms on Bugcrowd and joining Pinterest's effort.