Beth Cannon, Director, Security Engagement, Architecture & Strategy, PayPal
Security has always been a top priority at PayPal. It’s a core part of our value proposition for customers. We have a world-class team of dedicated security professionals who work vigilantly - 24 hours a day, seven days a week, 365 days a year - to keep our customers’ financial information secure. But as cybersecurity threats become more sophisticated, we know we can’t do this alone.
We recognize the critically important role that security researchers and our user community play in helping keep PayPal’s 162 million global customers secure. So we work closely with this community to find and resolve potential issues through our Bug Bounty program.
As a result of these efforts, we’re excited to announce that PayPal has won Vulnerability Lab’s “Best Bug Bounty Program 2014.” Sumanta Dey, Manager of Information Security, accepted the award on behalf of PayPal earlier this week at CeBIT 2015 in Hannover, Germany.
This award was voted on by more than 200 individuals, including members of the Vulnerability Lab community and other prestigious security researchers. To win the award, PayPal had to meet the following criteria:
Quality of written vulnerability report (advisory or bulletin) Reliability of the technical details Availability and applicability of the Proof of Concept Coordinated disclosure in connection with the manufacturer/program Severity and risk of the reported Bug Bounty Issue Type of vulnerability Reward Count (Minimum Bounty +$1000) Public feedback and response by independent researchers Views of plain issue and public resonance
We’re thrilled to be recognized with such a prestigious award, and would like to thank the Vulnerability Lab community and the many security researchers who work with us every day to help make sure our customers are secure.