ExpressVPN Announces Bug Bounty Program on Bugcrowd

guest · Jul 18, 2020

ExpressVPN Announces Bug Bounty Program on Bugcrowd
July 17, 2020
https://www.securityweek.com/expressvpn-announces-bug-bounty-program-bugcrowd

ExpressVPN has been running a bug bounty rewards program for four years, paying tens of thousands of dollars to security researchers who reported vulnerabilities in its apps, network, servers, site, and routers, among other assets.

“Today we are pleased to announce the launch of our newly extended bug-bounty program managed by Bugcrowd, and we encourage researchers, testers, and white-hat hackers to submit their findings through this platform,” the company announced.
The VPN service will focus on identifying issues leading to data leaks, weaknesses in encryption protocols, and flaws that could allow attackers to access its servers, or do harm to systems and users.

ExpressVPN is willing to pay between $2,100 and $2,500 for critical vulnerabilities, between $1,000 and $1,250 for issues rated high risk, $450 to $600 for medium-severity flaws, and $150 to $200 for low-risk bugs.
Click to expand...

Further details on what interested security researchers should expect when participating are available on Bugcrowd.
“We provide safe harbor in accordance with disclose.io’s terms. This means you can expect us to validate, respond to, and work on your report in a timely manner, then recognize you if your report leads to a change in our code,” ExpressVPN says, adding that it won’t pursue legal action against research done in good faith.
Click to expand...

Log in or Sign up

ExpressVPN Announces Bug Bounty Program on Bugcrowd

guest Guest

Log in or Sign up

ExpressVPN Announces Bug Bounty Program on Bugcrowd

guest Guest

Useful Searches