N

Netflix has opened its public bug bounty program

Netflix has opened its public bug bounty program

Today, Netflix has announced that it’s public bug bounty program. Prior to opening this program, the company carefully had a vulnerability disclosure program in place since 2013, and has now grown it into the new program. Since launch of the program back in 2013, the company has invited over 700 researchers to participate and has received 145 valid submissions. Now, the company’s new public program is on the Bugcrowd platform.

Many companies have their own bug bounty program that aim at pointing out security flaws before they come a widespread issue. For example, following the Meltdown and Spectre fiasco, Intel opening up a program. Apple launched its bug bounty program back in 2016 and other companies like Google, Samsung and Twitter all have their own bug bounty programs too.

In terms of pay, Netflix is paying out $1,102 on average for valid submissions. It’s worth mentioning that it has paid as high as $15,000 before. If you’re interested in seeing the company’s payout scale, you can do so here. Netflix’s report acknowledgement is 2.7 days and researchers that find an issue and Netflix fix it get added to the Security Researcher Hall of Fame.

Hamza Khalid

Hamza Khalid is the Lead Editor at The Jolt Journal. You're more than welcome to follow him on Twitter and follow The Jolt Journal on Twitter and Facebook. If you have any questions, concerns, or need to report something in this article, please send our team an email at [email protected] This story may be updated at any time if new information surfaces.

At The Jolt Journal, no one tells us what to write or how to write it. This is why, in the era of lies and bias, readers turn to an independent source. Rest assured, all information on our website is free of any bias or influence. If you see anything wrong with a story, please don't hesitate to reach out. We do our very best to report on the latest available information.

Leave a Reply