Threat Management, Vulnerability Management

Facebook to extend bug bounty program

Building on the early success of its bug bounty program, Facebook is planning to expand the initiative to cover vulnerabilities in pre-production code, Joe Sullivan, CSO at Facebook, told Facebook currently only provides monetary rewards for flaws discovered in code that already is in production. Now, it is planning to soon ask researchers to review code that has not yet been released. Facebook will send the pre-production code to select researchers with whom the company has established trusted relationships. Since rolling out the bug bounty program in July, Facebook has doled out some $70,000 to researchers around the world who discretely disclosed 72 vulnerabilities, all of which have since been fixed.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.