Bug Bounty & Vulnerability Disclosure — The Disclosure Loop

A hands-on mid-level course that runs a vulnerability disclosure and bug-bounty program that researchers respect and the business trusts. Work the disclosure loop - eight stages: Policy, Scope, Intake, Triage, Reward, Fix, Coordinate, and Improve - turning outside reports into fixed bugs, not legal fights. Honest and good-faith. Four hands-on activities in every lesson.

What you'll learn

• Publish a clear disclosure policy and safe-harbour scope.
• Intake and triage reports fairly and reproducibly.
• Reward, fix, and coordinate disclosure with researchers.
• Measure and improve the program over time.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.