Zohar Shachar -- Bug Bounty from Both Sides

Zohar Shachar joins us to discuss the bug bounty process from both sides. Zohar has spent time as a bug bounty hunter and shares wisdom on avoiding bug bounty-causing issues for your AppSec posture. We hope you enjoy this conversation with... Zohar spent time as a bug bounty hunter and shares wisdom on avoiding bug bounty causing issues for your application security posture. Keep security top of mind with continuous application security training for your developers. Security Journey offers bite-sized lessons with hands-on interactive training for all roles in the SDLC. Give your admins the ability to use pre-built or custom training paths with easy-to-use tracking and reporting.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Zohar Shachar joins us to discuss the bug bounty process from both sides of the equation.
→ Learn more about Security Journey

Connect with Zohar Shachar:
→ HackerOne
→ Google Abuse Vulnerability Reward Program

Mentioned in this episode:
→ HackerOne
→ Google Abuse Vulnerability Reward Program
→ Enso Security
→ Aquia

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Zohar Shachar: Bug Bounty from Both Sides
02:06 Let's get after it here. Super excited to have Zohar Shachar
05:42 Yeah. So I do have a question for you in regards
07:12 There is a lesson learned there, right
14:20 On the side of the researcher then, because I've heard other
17:57 You think about bug bounty versus pen testing, as since you're
21:01 Here's the million-dollar question. If you could only do one, what
24:42 Imagine if somebody invented a new service. It's lack of denial
28:24 Yeah. What are some other tips that you can offer to
33:58 That almost seems like a key takeaway, but I'll ask anyway