iDefense Doubles Bug Bounties

Iria · Jul 28, 2005, 12:26 AM

A day after rival 3Com's TippingPoint subsidiary announced a scheme to pay researchers for digging up vulnerabilities, iDefense on Wednesday upped the ante by doubling its bug bounties.

The Reston, Va.-based iDefense, which was recently purchased by security giant VeriSign for $40 million in cash, revealed a new payment schedule for its Vulnerability Contributor Program (VCP) on the Full Disclosure security mailing list.

"Effective immediately, we will be doubling our standard pricing structure for vulnerability submissions," wrote Michael Sutton, the director of iDefense Labs in an e-mail to the list.

Like TippingPoint, iDefense doesn't publish a reward rate structure, but instead requires researchers to submit a vulnerability before quoting a bounty.
__________
Read More / Source: TechWeb

Jul 28, 2005, 12:26 AM	#1
Iria DriverHeaven Extreme Member Join Date: Apr 2004 Posts: 7,275 Rep Power: 89	iDefense Doubles Bug Bounties A day after rival 3Com's TippingPoint subsidiary announced a scheme to pay researchers for digging up vulnerabilities, iDefense on Wednesday upped the ante by doubling its bug bounties. The Reston, Va.-based iDefense, which was recently purchased by security giant VeriSign for $40 million in cash, revealed a new payment schedule for its Vulnerability Contributor Program (VCP) on the Full Disclosure security mailing list. "Effective immediately, we will be doubling our standard pricing structure for vulnerability submissions," wrote Michael Sutton, the director of iDefense Labs in an e-mail to the list. Like TippingPoint, iDefense doesn't publish a reward rate structure, but instead requires researchers to submit a vulnerability before quoting a bounty. __________ Read More / Source: TechWeb