Hyatt launches public bug bounty program

Global hospitality chain Hyatt Hotels announced Wednesday that it’s launching a public bug bounty program through HackerOne, offering monetary prizes for security researchers to probe its websites and apps for leaky features and vulnerabilities that could be exploited by hackers. The company is now looking to crowdsource vulnerability testing from of a field of ethical hackers through HackerOne’s platform. Covered in the bug bounty program are the websites Hyatt.com, m.hyatt.com, world.hyatt.com and Hyatt’s Android and iOS apps. “At Hyatt, protecting guest and customer information is our top priority and launching this program represents an important step that furthers our goal of keeping our guests safe every day,” Benjamin Vaughn, Hyatt’s chief information security officer, in a press release. Hyatt’s bounties range from $300 to $4,000, based on the severity of bugs security researchers discover. The participants, of course, have to agree to ethical hacking terms like not collecting personally identifiable […]

The post Hyatt launches public bug bounty program appeared first on CyberScoop.

Continue reading Hyatt launches public bug bounty program