Kaspersky Lab extends Bug Bounty Program

NEW DELHI: Kaspersky Lab has announced the extension of its Bug Bounty Program, which encourages qualified individuals and organizations to submit reports on vulnerabilities and bugs found in its products.

Initially launched in August 2016, in partnership with leading bug bounty platform provider HackerOne, the program uncovered at least 20 bugs in six months, says Kaspersky.

As a result, the program has been extended with increased rewards for security researchers that discover remote code execution bugs.

Under the initial Bug Bounty Program, researchers were asked to examine Kaspersky Lab’s flagship products for consumers and enterprise, Kaspersky Internet Security 2017 and Kaspersky Endpoint Security 10.

The second phase of the program adds Kaspersky Password Manager 8 to the scope of the initiative. As an additional incentive, Kaspersky Lab has also increased the rewards for remote code execution bugs from $2000 to $5000.

With today’s increasingly complex security landscape, bug bounty programs are an effective way for security companies to incentivize external researchers to safely find software vulnerabilities. This strategy aids the continuous development of effective tools that provide the most effective level of protection for customers.