https://www.iotworldtoday.com/wp-content/themes/ioti_child/assets/images/logo/mobile-logo.png
  • Home
  • News
    • Back
    • Roundups
  • Strategy
  • Special Reports
  • Business Resources
    • Back
    • Webinars
    • White Papers
    • Industry Perspectives
    • Featured Vendors
  • Other Content
    • Back
    • Q&As
    • Case Studies
    • Features
    • How-to
    • Opinion
    • Podcasts
    • Strategic Partners
    • Latest videos
  • More
    • Back
    • About Us
    • Contact
    • Advertise
    • Editorial Submissions
  • Events
    • Back
    • Embedded IoT World (Part of DesignCon) 2022
Iot World Today
  • NEWSLETTER
  • Home
  • News
    • Back
    • Roundups
  • Strategy
  • Special Reports
  • Business Resources
    • Back
    • Webinars
    • White Papers
    • Industry Perspectives
    • Featured Vendors
  • Other Content
    • Back
    • Q&As
    • Case Studies
    • Features
    • How-to
    • Opinion
    • Podcasts
    • Strategic Partners
    • Latest videos
  • More
    • Back
    • About Us
    • Contact
    • Advertise
    • Editorial Submissions
  • Events
    • Back
    • Embedded IoT World (Part of DesignCon) 2022
  • newsletter
  • IIoT
  • Cities
  • Energy
  • Homes/Buildings
  • Transportation/Logistics
  • Connected Health Care
  • Retail
  • AI
  • Metaverse
  • Development
  • Security
ioti.com

Security


Why Bug Bounty Program Firm HackerOne Is Gamifying Cybersecurity

  • Written by Brian Buntz
  • 8th August 2018

The chief executive officer of HackerOne, maker of a quickly growing bug bounty program platform, draws inspiration from eSports

The startup HackerOne doesn’t fear hackers. It glorifies them. Elite security researchers using the firm’s bug bounty program are commemorated on comic book covers the firm commissions. The company plasters the faces of some of its most-talented hackers in its promotional materials and, earlier this year, extolled their talents in front of the U.S. Senate’s Subcommittee on Consumer Protection, Product Safety, Insurance and Data Security in a discussion.

The fundamental goal of the company is, of course, aligned with that of traditional cyber firms: They want to help their clients reduce cyber risk. But the company’s financial model stands out from many in that its clients pay for quantifiable results. If a security researcher identifies a valid security bug that its internal vulnerability response team validates, then the client pays for that disclosure. “You know it’s money well spent,” said HackerOne’s Chief Executive Officer Mårten Mickos. “It’s a bit like going to the dentist. If they don’t find anything, you’re happy. If they do find something, you are glad they found it.” If researchers find a minor or major vulnerability, the payout is proportional.

HackerOne isn’t the only company to offer a bug bounty platform. Bugcrowd and Synack offer similar crowdsourcing-based offerings. In addition, large tech companies such as Apple, Facebook, GitHub, Google and Intel offer bug bounty programs. But HackerOne is the biggest firm of its kind and is rapidly expanding. It’s grown its head count from 60 to 140 in the past year. According to Crunchbase, the company has raised $74 million to date, after scoring $40 million in Series C funding earlier this year. “We have more money in the bank than [our competitors] have raise,” Mickos said.

The number of verticals the company works with is expanding from an initial focus on consumer-facing companies to include health care clients, automotive firms and government agencies such as the European Commission, the U.S. General Services Administration and the U.S. Department of Defense. Internet of Things applications are a growing focus, but Mickos also stresses that many IoT devices are equipped or attached to user interfaces on mobile apps, websites or internal networks. “IoT security is not just a matter of securing the device. It’s also a matter of securing the software that operates on the device,” Mickos said. “We will not stop at anything. We do Web, IoT, mobile, API, on-prem software and CPUs.”

As organizations continue to deploy more connected devices and the level of cyber awareness steadily increases, so does the volume of cybersecurity products, vendors and noise. While time-worn defense such as firewalls, encryption, threat detection software and so forth are all essential, a cybersecurity strategy based solely around discrete cyber products can offer unclear benefits.

As of May 2018, cybersecurity professionals using the HackerOne platform have identified 72,000 vulnerabilities.

As the company’s community matures, so does the quality of the incoming reports from cybersecurity researchers. In 2015, 68 percent of the cybersecurity reports in public programs either had clear or nominal benefits for the organizations launching the programs. In 2017, that number had climbed to 74 percent.

Mickos is upbeat that HackerOne will become more effective at identifying vulnerabilities as it experiments with pooling the resources of elite hackers. At Black Hat, the company is launching a live cybersecurity event with 100 of its most elite hackers flown in from across the world. “They are collaborating with each other, competing against each other,” Mickos said. In the future, the firm plans to build on this experiment, drawing gamification lessons from the world of eSports to magnify the talents of hackers. “We are already good, but we could be better,” Mickos said.

Tags: Security Features

Related


  • Image shows welding robotics and a digital manufacturing operation.
    IoT Supply Chain Vulnerability Poses Threat to IIoT Security
    The supply chain provides building blocks for IoT but also vulnerabilities. IT pros need to ward against malicious attacks that exploit supply chain security gaps.
  • IoT Security Needs Pen Testing Approach
    IoT pen testing is a no-brainer, say experts. But don’t test everything.
  • Image shows a digital background depicting innovative technologies in security systems,
    Securing IoT Devices With Zero Trust Requires Mindset Shift
    Zero-trust approaches require a shift in mindset to ensure IoT devices have rigorous security policies applied — and the work is never done, say IT pros.
  • An Integrated Approach to IoT Security
    This e-book provides a comprehensive framework to help organizations reduce risk in IoT products and environments.

2 comments

  1. Avatar Howard Tarler 9th August 2018 @ 8:16 pm
    Reply

    How can the client be sure that the bug wasnt placed by the hacker that “discovered” it?

  2. Avatar Brian Buntz 14th August 2018 @ 12:50 am
    Reply

    There’s a review process companies like this use before they money is paid to the hacker. In theory, if the hacker inserted a bug and then “discovered” it, that person wouldn’t get paid.

Leave a comment Cancel reply

-or-

Log in with your IoT World Today account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Related Content

  • Common Internet of Things Security Pitfalls 
  • Can Privacy-Preserving Machine Learning Overcome Data-Sharing Worries?
  • Developing a Critical Infrastructure Cybersecurity Strategy
  • Addressing IoT Security Challenges From the Cloud to the Edge 

Roundups

View all

IoT Product Roundup: PTC, Nokia, Arm and More

19th May 2022

IoT Deals, Partnerships Roundup: Intel, Nauto, Helium and more

14th May 2022

IoT Product Roundup: Amazon, Synaptics, Urban Control and More

27th April 2022

White Papers

View all

The Role of Manufacturing Technology in Continuous Improvement Ebook

6th April 2022

IIoT Platform Trends for Manufacturing in 2022

6th April 2022

Latest Videos

View all
Dylan Kennedy of EMQ

Embedded IoT World 2022: Dylan Kennedy of EMQ

Dylan Kennedy, EMQ’s VP of global operations, sat down with Chuck Martin at Embedded IoT World 2022.

Embedded IoT World 2022: Omdia’s Sang Oh Talks Vehicle Chip Shortage

Omdia’s automotive semiconductor analyst sits down with Chuck Martin at this year’s event

E-books

View all

How Remote Access Helps Enterprises Improve IT Service and Employee Satisfaction

12th January 2022

An Integrated Approach to IoT Security

6th November 2020

Webinars

View all

Rethinking the Database in the IoT Era

18th May 2022

Jumpstarting Industrial IoT solutions with an edge data management platform

12th May 2022

AI led Digital Transformation of Manufacturing: Time is NOW

9th December 2021

Special Reports

View all

Omdia’s Smart Home Market Dynamics Report

7th January 2022

Cybersecurity Protection Increasingly Depends on Machine Learning

28th October 2020

IoT Security Best Practices for Industry and Enterprise

20th October 2020

Twitter

IoTWorldToday, IoTWorldSeries

Clearview AI has been fined $9.4 million for collecting images of people from social media platforms to add to its… twitter.com/i/web/status/1…

24th May 2022
IoTWorldToday, IoTWorldSeries

Swiss-startup Airyacht is developing an eponymously named vehicle that it says will take the luxury-yacht experienc… twitter.com/i/web/status/1…

23rd May 2022
IoTWorldToday, IoTWorldSeries

@Tesla’s #Autopilot being investigated once again following fatal crash in Newport Beach, California. iotworldtoday.com/2022/05/23/tes…

23rd May 2022
IoTWorldToday, IoTWorldSeries

A new Kansas law will enable #driverless deliveries from @Walmart and its partner @Gatik_AI. #AVs… twitter.com/i/web/status/1…

23rd May 2022
IoTWorldToday, IoTWorldSeries

Access a world of opportunity in 2022 with @IoTWorldToday ➡️ Now is time to unlock ROI, by accessing a global com… twitter.com/i/web/status/1…

23rd May 2022
IoTWorldToday, IoTWorldSeries

3D Home Printer to Build 72 Residences for National Homebuilder dlvr.it/SQhWSF https://t.co/XJOs70DqzH

19th May 2022
IoTWorldToday, IoTWorldSeries

Microsoft Ramping up Cybersecurity Service Offerings dlvr.it/SQhPR0 https://t.co/nYzaDRnyVY

19th May 2022
IoTWorldToday, IoTWorldSeries

IoT Product Roundup: PTC, Nokia, Arm and More dlvr.it/SQhNNF https://t.co/ZApdw3RHdu

19th May 2022

Newsletter

Sign up for IoT World Today newsletters: vertical industry coverage on Tuesdays and horizontal tech coverage on Thursdays.

Special Reports

Our Special Reports take an in-depth look at key topics within the IoT space. Download our latest reports.

Business Resources

Find the latest white papers and other resources from selected vendors.

Media Kit and Advertising

Want to reach our audience? Access our media kit.

DISCOVER MORE FROM INFORMA TECH

  • IoT World Series
  • Channel Futures
  • RISC-V
  • Dark Reading
  • ITPro Today
  • Web Hosting Talk

WORKING WITH US

  • Contact
  • About Us
  • Advertise
  • Login/Register

FOLLOW IoT World Today ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookies Policy
  • Terms
Copyright © 2022 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X