Play by Play: Bug Bounties for Companies

In this course, you’ll learn how your organization would benefit from a bug bounty and how to determine if it’s ready to undertake a bug bounty program of its own.


In this course, Play by Play: Bug Bounties for Companies, Troy Hunt and Casey Ellis discuss bug bounties from the perspective of organizations interested in running their first bug bounty program. Learn the purpose bug bounties serve, how bug bounties are run, and how to position a bug bounty program to leadership in order to get buy-in for the program. By the end of this course, you’ll be able to speak to the benefits of a bug bounty program and ascertain if your organization is ready to undertake a bug bounty of its own.

• Course Overview 1min
• What Is the Value Proposition of Bug Bounties? 3mins
• Where Do Companies Tend to Go Wrong Running Bug Bounties? 3mins
• Common Concerns Surrounding Bug Bounties 5mins
• Selling Bug Bounties to Executives and Legal 20mins
• Do Bug Bounties Replace Traditional Pen Testers? 4mins
• Scoping a Bug Bounty Program 1min
• Are Bug Bounties Something Companies Need to Ease Into? 7mins