Bug Bounty & Vulnerability Disclosure Programs
                     Bug Bounty
Vulnerability
Disclosure
@infosectra in Programs #learntor ise
www. infosectra in .com
Bug Bounty
A Bug Bounty is a cash incentive given to
Ethical Hackers for identifying bugs.
VDPs
A Vulnerability Disclosure Program (VDP) is a 
standardized means for third parties,
researchers, and Ethical Hackers to identify flaw+s 
correctly.
@infosectra in #learntor ise
www. infosectra in .com
Bug Bounty
Bounty schemes often have predefined targets, 
reward tiers, and SLA (Service Level Agreement) 
times.
VDPs
VDPs enable firms to define a broader scope with 
more research resources to determine and 
report on. +
@infosectra in #learntor ise
www. infosectra in .com
Bug Bounty
The Bug Bounty Program enables firms to have a 
broad, skilled team of ethical hackers regularly 
detecting and resolving vulnerabilities.
VDPs
VDPs provide a similar platform for disclosure but 
often do not receive as much interest, partly
because they do not pay out bounties. +
@infosectra in #learntor ise
 [email protected]