About OWASP/Bug Bounty - Revision history

Mtesauro: Minor updates/corrections

2018-07-13T22:56:23Z

Minor updates/corrections

Johanna Curiel: Replaced content with "=UPDATE : 21 June, 2016= AT THIS MOMENT, OWASP IS NOT RUNNING A BUG BOUNTY ON ITS INFRASTRUCTURE. The Bounty program running right now is for OWASP PROJECTS. For more..."

2016-06-21T11:21:01Z

Replaced content with "=UPDATE : 21 June, 2016= AT THIS MOMENT, OWASP IS NOT RUNNING A BUG BOUNTY ON ITS INFRASTRUCTURE. The Bounty program running right now is for OWASP PROJECTS. For more..."

Johanna Curiel at 02:49, 21 June 2016

2016-06-21T02:49:39Z

Brennan: /* Contact and Vulnerability disclosure */

2016-02-13T16:15:06Z

‎Contact and Vulnerability disclosure

Brennan at 16:14, 13 February 2016

2016-02-13T16:14:15Z

Brennan: /* Contact and Vulnerability disclosure */

2016-02-13T16:09:29Z

‎Contact and Vulnerability disclosure

Brennan at 15:52, 13 February 2016

2016-02-13T15:52:12Z

Brennan at 15:51, 13 February 2016

2016-02-13T15:51:51Z

Brennan at 15:51, 13 February 2016

2016-02-13T15:51:40Z

Brennan: /* Reproducibility */

2016-02-13T15:49:50Z

‎Reproducibility

@@ Line 1: / Line 1: @@
 =UPDATE : 21 June, 2016=
-AT THIS MOMENT, OWASP IS NOT RUNNING A BUG BOUNTY ON ITS INFRASTRUCTURE.
+The '''only''' Bounty program running right now is for OWASP PROJECTS.
 For more information check the following page:
 https://www.owasp.org/index.php/Bug_Bounty_Projects
-When is time, we will announce a Bug Bounty for this part soon.
+AT THIS MOMENT, OWASP IS NOT RUNNING A BUG BOUNTY ON ITS INFRASTRUCTURE.

@@ Line 1: / Line 1: @@
-{{taggedDocument
+=UPDATE : 21 June, 2016=
-<h1> DRAFT OWASP Foundation Bug Bounty Program 11-Feb-2016</h1>
+AT THIS MOMENT, OWASP IS NOT RUNNING A BUG BOUNTY ON ITS INFRASTRUCTURE.
-No technology is perfect, and OWASP Foundation believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. If you believe you've found a security issue in our product or service, we encourage you to notify us. We welcome working with you to resolve the issue promptly.
+The Bounty program running right now is for OWASP PROJECTS.
-=Disclosure Policy=
+When is time, we will announce a Bug Bounty for this part soon.

← Older revision		Revision as of 02:49, 21 June 2016
Line 1:		Line 1:
−		+	{{taggedDocument
		+	\| type=inactiveDraft
		+	\| lastRevision=2016-06-20
		+	\| comment=The second half of this page should be reviewed and finalized.
		+	}}

	<h1> DRAFT OWASP Foundation Bug Bounty Program 11-Feb-2016</h1>		<h1> DRAFT OWASP Foundation Bug Bounty Program 11-Feb-2016</h1>

← Older revision		Revision as of 16:15, 13 February 2016
Line 89:		Line 89:

	To Report a Vulnerability using BugCrowd [https://bugcrowd.com/owaspfoundation Click Here] testing		To Report a Vulnerability using BugCrowd [https://bugcrowd.com/owaspfoundation Click Here] testing
		+
		+	Want to help OWASP by donation of your product or service [https://www.tfaforms.com/308703 Click Here] and tell us more.

	=WALL OF FAME=		=WALL OF FAME=

@@ Line 3: / Line 3: @@
 <h1> DRAFT OWASP Foundation Bug Bounty Program 11-Feb-2016</h1>
 Please note that is NOT a approved policy yet just a DRAFT due to a recent vulnerability in the OWASP Infrastructure.
 No technology is perfect, and OWASP Foundation believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. If you believe you've found a security issue in our product or service, we encourage you to notify us. We welcome working with you to resolve the issue promptly.
@@ Line 90: / Line 84: @@
 =Contact and Vulnerability disclosure=
-Please [https://www.tfaforms.com/308703 Contact OWASP Click Here ] with any vulnerability reports or with any question about the program.
+To Report a Security Bug directly to OWASP Operations [https://www.tfaforms.com/308703 Click Here]
 =WALL OF FAME=

@@ Line 91: / Line 91: @@
 Please [https://www.tfaforms.com/308703 Contact OWASP Click Here ] with any vulnerability reports or with any question about the program.
 ==THIS IS A DRAFT POLICY==
 If you would like to make this policy better, simple.. edit the wiki as part of the community effort, that is why we are awesome no red tape ;) - T.Brennan

@@ Line 6: / Line 6: @@
 To Report a Security Bug directly to OWASP Operations [https://www.tfaforms.com/308703 Click Here]
-To Report a Vulnerabilty using [hackerone.com HackerONE] [https://www.hackerone.com/owasp Click Here]
+To Report a Vulnerabilty using [http://www.hackerone.com HackerONE] [https://www.hackerone.com/owasp Click Here]
 To Report a Vulnerability using <insert>....

@@ Line 34: / Line 34: @@
 =Reproducibility=
-Our volunteers and engineers must be able to reproduce the security flaw from your report. Reports that are too vague or unclear are not eligible for a reward. Reports that include clearly written explanations and working code are more likely to garner rewards.
+Our volunteers and engineers must be able to reproduce the security flaw from your report.
 =Severity=