HackerOne Mandates ID Verification for Bug Bounty Submissions

HackerOne has confirmed that all hackers must now complete identity verification before submitting reports to any bug bounty program (BBP) on its platform, a move the company says is necessary to meet regulatory requirements. The policy distinguishes bug bounty programs from vulnerability disclosure programs (VDPs), which remain open to unverified researchers since no monetary reward is involved. Anyone hoping to collect a bounty payout or access other reward-based programs will therefore need to go through the verification process first. How the Verification Process Works To begin, hackers must visit their User profile page, click the ID Verification header, and first sign HackerOne’s Rules of Engagement, a document...

Læs hele artiklen hos kilden.