Yahoo’s Bug Bounty Program Pays Out $2 Million

By Marcos Colon

In just three years since its inception, Yahoo’s bug bounty program has surpassed a total of $2 million in payouts.

In a recent blog post, Andrew Rios, security engineer at Yahoo, highlighted the major achievement of the initiative since it first kicked off.

“Our bug bounty program has increasingly helped to harden the security of our products,” he wrote. “Over this short period, we’ve received thousands of submissions, and, as of December 2016, the bounties awarded for reports that resulted in real bug fixes has now surpassed a total of $2 million.”

One of the more recent prizes was awarded last month when independent security researcher Michael Reizelman helped the company identify and patch a vulnerability in Flickr.

The program sees more than 2,000 contributors from more than 80 countries, and in 2016 alone it awarded a total of 200 researchers around the world. 

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.