Company
Date Published
Author
Bugcrowd
Word count
408
Language
English
Hacker News points
None

Summary

Traditional penetration testing has become less effective due to the rapid pace of application development and increasing data breaches. The traditional approach is often performed by a single person or team using standardized methodology, which may not be enough to find serious vulnerabilities given the vast number of adversaries. Additionally, traditional pen tests are periodic "point-in-time" exercises that leave new code untested for months, lack true insight into actual risk, and are not cost-effective. To address these pain points, crowdsourced security methods such as bug bounty programs have emerged, which leverage human intelligence at scale to deliver rapid discovery of high-risk vulnerabilities and provide constant coverage necessary in today's modern software development life cycle.