Zohar Shachar -- Bug Bounty from Both Sides

Zohar Shachar joins us to discuss the bug bounty process from both sides. Zohar has spent time as a bug bounty hunter and shares wisdom on avoiding bug bounty-causing issues for your AppSec posture. We hope you enjoy this conversation with... Zohar spent time as a bug bounty hunter and shares wisdom on avoiding bug bounty causing issues for your application security posture. Keep security top of mind with continuous application security training for your developers. Security Journey offers bite-sized lessons with hands-on interactive training for all roles in the SDLC. Give your admins the ability to use pre-built or custom training paths with easy-to-use tracking and reporting.The Application Security Podcast is brought to you by Security Journey.About Security JourneyZohar Shachar joins us to discuss the bug bounty process from both sides of the equation.→ Learn more about Security JourneyConnect with Zohar Shachar:→ HackerOne→ Google Abuse Vulnerability Reward ProgramMentioned in this episode:→ HackerOne→ Google Abuse Vulnerability Reward Program→ Enso Security→ AquiaFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Zohar Shachar: Bug Bounty from Both Sides02:06 Let's get after it here. Super excited to have Zohar Shachar05:42 Yeah. So I do have a question for you in regards07:12 There is a lesson learned there, right14:20 On the side of the researcher then, because I've heard other17:57 You think about bug bounty versus pen testing, as since you're21:01 Here's the million-dollar question. If you could only do one, what24:42 Imagine if somebody invented a new service. It's lack of denial28:24 Yeah. What are some other tips that you can offer to33:58 That almost seems like a key takeaway, but I'll ask anyway