"In the end, a software company needs to make a build-versus-buy decision," says Chris Morales, head of security analytics at Vectra. "Do they want to run the bug bounty program on their own or can they benefit from a third party who runs one for them?"

Read the article