HackerOne, GovTech and CSA to push through second bug bounty programme

The first leg of the programme reported 26 valid vulnerabilities in the government’s systems.

HackerOne, Singapore’s Government Technology Agency (GovTech) and Cyber Security Agency of Singapore (CSA) announced that they will launch the second Government Bug Bounty Programme (GBBP), following the said success of the first one.

During the first GBBP that ran from 27 December 2018 to 16 January 2019, 400 hackers were able to to test five internet-facing government systems. 26 valid vulnerabilities were reported through the GBBP on HackerOne, seven were considered low severity, 18 were medium severity, and one was high severity.

Hackers have earned a total of $15,924.78 (US$11,750) for the reported vulnerabilities.

GBBP is part of the government’s ongoing initiative to improve the security of its cyberspace.

Join Singapore Business Review community
Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.