Travel Search Website Skyscanner Launches Bug Bounty Program

guest · Jan 30, 2019

Travel Search Website Skyscanner Launches Bug Bounty Program
January 30, 2019
https://www.securityweek.com/travel-search-website-skyscanner-launches-bug-bounty-program

Skyscanner has been running a private bug bounty program, which it claims helped address over 200 vulnerabilities in its systems. The company has now decided to open its program to the public.

The bug bounty program, run with the help of crowdsourced security platform Bugcrowd, covers the skyscanner.net website and regional domains, the gateway.skyscanner.net API, the iOS and Android apps, and the partnerportal.skyscanner.net website. Other subdomains are out of scope.

The highest rewards, between $1,500 and $2,000 per vulnerability, have been offered for serious server security misconfigurations, server-side injection flaws, broken authentication issues, sensitive data exposure, and cryptography-related problems.
Click to expand...

Log in or Sign up

Travel Search Website Skyscanner Launches Bug Bounty Program

guest Guest

Log in or Sign up

Travel Search Website Skyscanner Launches Bug Bounty Program

guest Guest

Useful Searches