Reply to thread

Message

<blockquote data-quote="Deleted member 65228" data-source="post: 714785">It&#039;s a really good platform and I definitely recommend it for people to check out.I&#039;ve used it for a private programme before and the user interface was nice and simple, notifications were nice and required data to receive rewards wasn&#039;t so bad. I&#039;ve seen vendors require really intrusive data to send out rewards such as an online version of your real pass-port, but HackerOne won&#039;t request such. You&#039;ll have to sign an online document (digitally sign) if you accept payment bounty rewards and PayPal is also supported on the platform; you can also have your reward given to charity if you don&#039;t accept it as far as I am aware.There&#039;s another good platform just like HackerOne which has been around for longer if I recall correctly called <a href="https://www.bugcrowd.com/" target="_blank">BugCrowd</a>. I&#039;ve also used that platform, and it&#039;s also really good. I definitely recommend checking out BugCrowd as well if you were interested in HackerOne. The support for BugCrowd is quite good in my opinion based on personal experience although I&#039;ve never been required to request it for HackerOne so I can&#039;t comment on support for them.Both HackerOne and BugCrowd support profile statistics in-case you&#039;re a competitive type. However on HackerOne, if you are using a private programme for submission, even though your rank will increase on your public profile, it may not necessarily increment the statistics for bugs found/thanks count.There&#039;s different vulnerability programmes across each of those platforms (in terms of which vendors are there). AVG, Avira and SOPHOS are all definitely on BugCrowd though. Some vendors like Avast have their own vulnerability submission process where you rely on e-mail communication (with PGP encryption support - although not mandatory like with Zerodium).</blockquote>

[QUOTE="Deleted member 65228, post: 714785"] It's a really good platform and I definitely recommend it for people to check out. I've used it for a private programme before and the user interface was nice and simple, notifications were nice and required data to receive rewards wasn't so bad. I've seen vendors require really intrusive data to send out rewards such as an online version of your real pass-port, but HackerOne won't request such. You'll have to sign an online document (digitally sign) if you accept payment bounty rewards and PayPal is also supported on the platform; you can also have your reward given to charity if you don't accept it as far as I am aware. There's another good platform just like HackerOne which has been around for longer if I recall correctly called [URL='https://www.bugcrowd.com/']BugCrowd[/URL]. I've also used that platform, and it's also really good. I definitely recommend checking out BugCrowd as well if you were interested in HackerOne. The support for BugCrowd is quite good in my opinion based on personal experience although I've never been required to request it for HackerOne so I can't comment on support for them. Both HackerOne and BugCrowd support profile statistics in-case you're a competitive type. However on HackerOne, if you are using a private programme for submission, even though your rank will increase on your public profile, it may not necessarily increment the statistics for bugs found/thanks count. There's different vulnerability programmes across each of those platforms (in terms of which vendors are there). AVG, Avira and SOPHOS are all definitely on BugCrowd though. Some vendors like Avast have their own vulnerability submission process where you rely on e-mail communication (with PGP encryption support - although not mandatory like with Zerodium). [/QUOTE]

Verification