OZON will start paying users who find vulnerabilities on the retailer’s website

OZON launched a public bug bounty program on the HackerOne platform to collect information about vulnerabilities. On the first

At this stage, the company invests more than 3 million rubles in working with hackers. Security researchers not only from Russia, but also from other countries of the world can take part in the bug bounty program.

The amount of reward depends on the impact of the bugon the operation of the service, its potential damage and other factors. For example, for found XSS (cross-site scripting) OZON can pay about 17 thousand rubles, and for more serious problems, for example, remote code execution (RCE) -  up to 120 thousand rubles.

The report notes that the launch of the program does not cancel the work of the IT laboratory of the marketplace to ensure the security of company services.

Bug bounty program for rewarding people for finding vulnerabilities  companies also have: Amazon, Google, Facebook. 

Read also

Germany became the first major economy to abandon coal and nuclear power

It turned out that made the Mayan civilization leave their cities

Look at the bare core of a giant planet: scientists have found this for the first time