Slack Increases Minimum Bounties for High and Critical Bugs for 30 Days

October 28, 2019 johnk

Share this Article
Facebook
Twitter
Email
LinkedIn

This blog post was contributed by Slack Staff Technical Program Manager Branden Jordan.

Over the past five years, Slack and HackerOne have established a partnership and commitment to ensure Slack’s platform is secure for its over 12 million daily active users. To build on this momentum and engage top researchers from the HackerOne community, Slack is increasing its minimum bounties for High and Critical findings to $2500 and $5000 respectively from October 28, 2019 - November 27, 2019!

HackerOne’s bug bounty program and researchers have played an integral part in improving the overall security posture of Slack. Over the course of five years, the Slack team has resolved over 900 vulnerabilities thanks to over 450 hackers participating in our program. A huge accomplishment. Thank you to all the researchers who have contributed to date and we look forward to seeing more of you!

To learn more about Slack’s bug bounty program and to report a vulnerability, please visit our program page at https://hackerone.com/slack.

Lowering Your Topic: Pentesting Fees with HackerOne

Each blog in the series "Breaking Down the Benefits of Hacker-Powered Pentests" has focused on one of the ...

8 High-Impact Bugs and How HackerOne Customers Avoided a Breach: Privilege Escalation

Customers tell us that a big difference between hacker-powered security and traditional approaches is the i...

Most Recent Articles

Code Reviews, Small Moments, Big Impacts

Slack Increases Minimum Bounties for High and Critical Bugs for 30 Days

Previous Article

Next Article

Most Recent Articles

MultiplyingAt HackerOne, we use the Spotify Engineering Framework, meaning we work in Squads. Each Squad is a mini-team focused on specific tasks, like a small startup within the company.The...

What Is a Prompt?A prompt is an instruction that you give to an LLM to retrieve the information that you need or to have the LLM perform the task that you’d like it to do. There are so many things...

Q: What is the Ambassador World Cup?The Ambassador World Cup is HackerOne’s annual year-long competition for our Brand Ambassador Program. Formatted like the FIFA World Cup, it’s designed to bring...

But it’s not your fault. It’s not just a matter of having a bad attitude or needing to “do better.” There’s always a reason behind these feelings. Perhaps you don’t feel like you’re growing in the...

In Part 1 of our Pre-Pentest Checklist Series, we explored the foundational aspects of pentesting—focusing on the "what" and "why" to ensure your pentest not only meets compliance standards but...

Brian Krebs has reported that "Those sources said the breach appears to have started when the attackers somehow gained access to the company’s code repository at Gitlab, and that in that...

Each year, HackerOne employees nominate peers to receive the covetable Values Awards. Five Hackeronies are recognized for their unique contribution to our company's success, and their dedication...

Race condition vulnerabilities make up less than 0.3% of reports on the HackerOne platform. However, researchers have recently been particularly interested in experimenting with race condition...

We’ve all been stuck in ineffective 1:1s. There was no clear agenda and the only thing you spoke about was the last episode of Succession, the other person arrived late, or it was canceled last...

Flexibility RedefinedOne of the advantages of digital first work is the flexibility it offers employees. Our recent employee engagement survey tells us that flexibility is important to working at...

Effectiveness: Effectiveness measures the method's ability to provide reliable and accurate vulnerability detections, comprehensive system coverage, compliance with standards, and a diverse...

Each year, HackerOne employees nominate peers to receive the covetable Values Awards. Five Hackeronies are recognized for their unique contribution to our company's success, and their dedication...

This is an overview of the conversation and some of the best practices shared when creating a remote workplace. Listen to the full episode and learn how to align your executive team around your...

The Significance of Credential RotationsIn today's digital landscape, the significance of regular credential rotations cannot be overstated. Unfortunately, not all organizations recognize the...

The Significance of Credential RotationsIn today's digital landscape, the significance of regular credential rotations cannot be overstated. Unfortunately, not all organizations recognize the...

We spoke with Spencer Chin, Director of North America Sales Engineering at HackerOne, and Jasmin Landry, Senior Director at Nasdaq and HackerOne penetration tester. Together, they have helped...

Diving into pentest readiness, this comprehensive preparation guide is adaptable to different types of pentest, regardless of the target's size or complexity.In Part 1 of our Pre-Pentest Checklist...

To ensure that AI is more secure and trustworthy, the EO calls on companies who develop AI and other companies in critical infrastructure that use AI to rely on “red-teaming”: testing to find...

What Is XZ Utils and What Happened?XZ Utils is an open source software commonly found in most Linux distros, although CVE-2024-3094 is only present in XZ Utils versions 5.6.0 and 5.6.1, meaning...

At HackerOne, our company values - Default to Disclosure, Respect All People, Win as a Team, Lead with Integrity, and Execute with Excellence - reflect our beliefs, priorities, and...