Facebook to extend bug bounty program

Building on the early success of its bug bounty program, Facebook is planning to expand the initiative to cover vulnerabilities in pre-production code, Joe Sullivan, CSO at Facebook, told SCMagazineUS.com. Facebook currently only provides monetary rewards for flaws discovered in code that already is in production. Now, it is planning to soon ask researchers to review code that has not yet been released. Facebook will send the pre-production code to select researchers with whom the company has established trusted relationships. Since rolling out the bug bounty program in July, Facebook has doled out some $70,000 to researchers around the world who discretely disclosed 72 vulnerabilities, all of which have since been fixed.