Apple opening its bug bounty program up to all researchers is an interesting move–but an anticipated one. Public programs open companies up to more diversity and creativity from a broader crowd of security researchers.
Among other updates to the program, Apple is demonstrating that it understands the importance of finding bugs not just when they’re in the hands of customers, but also in the production cycle.
In fact, Bugcrowd’s Priority One Report shows that this model is invaluable for vulnerability discovery — over the last year, vulnerability submissions increased by 92% and average payouts increased by a whopping 83%.
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.