publish something about our security program

[chadwhitacre]

Reticketed from #558 (comment).

We've put a lot of effort over the past few months into setting up our HackerOne program. Let's blog about it!

Draft 1: "An Open Vulnerability Program: Announcing Gratipay on HackerOne"

[chadwhitacre]

Draft 1: "An Open Vulnerability Program: Announcing Gratipay on HackerOne"

[TheHmadQureshi]

Awesome! 👍

[chadwhitacre]

I've been tinkering with Draft 1 rather than making a new draft.

[chadwhitacre]

Is it too bold to title this, "A New Standard in Transparent Security"?

[chadwhitacre]

Maybe just "Transparent Security"

[chadwhitacre]

Any objections to publishing?

"Transparent Security: Introducing Gratipay's Program on HackerOne"

[chadwhitacre]

Alright, here we go ...

[chadwhitacre]

I added some stats. A quarter of our reports are duplicates, and half our reports are low-quality.

[chadwhitacre]

• make a page listing our disclosures
• figure out an image

[chadwhitacre]

[chadwhitacre]

[chadwhitacre]

Two points make a line? :-)

---

https://hackerone.com/blog/uber-launches-first-of-its-kind-hacker-loyalty-program-with-hackerone-bonuses

---

https://blog.newrelic.com/2016/03/14/responsible-disclosure-security/

[chadwhitacre]

[chadwhitacre]

Ready? I think we're ready ...

[chadwhitacre]

Published! 😳

https://twitter.com/Gratipay/status/718480331666550784

[chadwhitacre]

I've received a kind note in private email from HackerOne's CEO. I've asked him if I can share it here.

[chadwhitacre]

Kudos to the Gratipay team for the Transparent Security blog posting. It should be essential reading for anyone doing bug bounty programs or vulnerability coordination. You don't know how proud we are to have you on the H1 platform!

[chadwhitacre]

Also some encouraging feedback on Twitter:

@whit537 Nice article about the @gratipay bounty program!

https://twitter.com/mrusschen/status/718485981075283971

Holy cow @gratipay, this is a goldmine of feedback. Great writeup!

https://twitter.com/Magoo/status/718487174350409728