• IphtashuFitz@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    2 days ago

    Same here. We also contract with HackerOne, a company of “white hat” hackers that actively attack our site and earn significant bounties if they can do something like remotely execute commands, exfiltrate data, etc. Only after they provide us with a repeatable set of steps and we close the hole do they get paid.