What’s the Value of Bug Bounty Programs?

The exploratory study aims to develop an economic model to assess the value of Vulnerability Reward (Bug Bounty) programs, in which software companies offer compensation to outside hackers who find vulnerabilities and disclose responsibly.

Research Question: What’s The Value of Bug Bounty Programs?

1. Financial Value : e.g. more efficient bug discovery process
2. Business / Organizational Value: e.g. a new source for HR hiring
3. Reputational Value: e.g. company is considered “more secure”
4. Technology Value: e.g. effect of program on product feature R&D
5. Legal/ Liability Value: e.g. lower cyber insurance premium