Vulnerability Management

GM teams with HackerOne on vulnerability submission program

General Motors launched a vulnerability submission program earlier this week, promising not to sue researchers who submit their findings through the program website and follow its guidelines.

“We value the positive impact of your work and thank you in advance for your contribution,” the carmaker said on the HackerOne website, encouraging researchers to disclose information about security vulnerabilities in the company's products and services. “We want to hear from you.”

The guidelines listed on the site include not doing harm to GM customers or the company, providing details of the vulnerability and refraining from disclosing findings publicly only after GM confirmed that it had “completed remediation.”

The company teamed with HackerOne to create the program portal.

GM's initiative follows in the footsteps of Tesla, which created a similar program last June.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.