SSDLC Services

Bug Bounty

Support for setting up vulnerability reporting programmes involving authorised researchers.

Integrating security into software development and evolution.
AI-generated illustration

SCOPE OF WORK

The service

Support for setting up vulnerability reporting programmes involving authorised researchers.

Service activities

  • Defining scope, rules and reward criteria
  • Organising report intake and triage
  • Coordinating remediation and communication

Scope, technologies, activity frequency and support levels are agreed according to the context. Operating arrangements are defined before the service begins.

How the project works

  1. 01
    Define

    Objectives, scope and responsibilities.

  2. 02
    Deliver

    Agreed activities and evidence collection.

  3. 03
    Report

    Findings, limitations and next steps.

Where to start

Describe the systems involved, the issue to address and the project contacts. In our initial discussion, we define objectives, required information and the approach to delivery.

Chat with us