“Companies hosting bug bounty programs can fix problems before they become widely known and exploited,” says Chris Morales, head of security analytics at Vectra. “In the end, you need to make a build-versus-buy decision. Awarding hackers one at a time is cheaper than employing full-time security researchers."

Read the article