Which program is ideal for your company
The goal of this post is to help you choose the best Bug Bounty program model. On the BugHunt platform, there are two program models available: Public and Private.
Each program has its characteristics and should be selected based on the product, its exposure, and its maturity.
For which products should you use a Public Program?
Public Programs are recommended for products that have high maturity in terms of security, development, and processes, and those with significant exposure (large attack surface). These are websites, services, or products directly available on the internet, accessible by any user or a large number of users. Examples include e-commerce sites, apps available on app stores, and customer service websites.
Public Programs are accessible to the entire BugHunt expert community, resulting in a large volume of targeted analyses and a rapid return of identified vulnerabilities.
For which products should you use a Private Program?
Private Programs are suitable for new products, including those in the launch phase or requiring complete discretion. Private Programs offer privacy, meaning only experts validated by BugHunt are invited. The company can select the experts they wish to invite to the program, choosing those with the most relevant knowledge of the product or system being evaluated.
All BugHunt programs have specific rules set by the company, which should be described based on the testing needs of the product or system.
BugHunt Managed Service
In addition to these models, you can opt for the support of the BugHunt Managed Service team to assist in designing and managing your program, whether you choose the public or private model.
With the Managed Service, BugHunt provides a triage team that ensures your company receives only the relevant reports, evaluates the severity of each vulnerability, and removes potential false positives and duplicates. The BugHunt Managed Service also provides you with a Customer Success Manager (CSM) to keep you in direct contact with the platform, aiming to deliver the best experience and achieve the best results!