YesWeHack Public Programs

YesWeHack Public Programs open a customer's bug bounty to the full YesWeHack community of ethical hackers, maximizing the number of researchers and skill sets looking at an attack surface. Programs are listed publicly on the platform with their scope, rules and rewards, and any registered hunter can participate.

The wider reach increases the chance of finding unusual and high-impact vulnerabilities, and public programs also signal to customers and regulators that an organization welcomes security research. Because volume can be higher, YesWeHack's triage team filters duplicates, invalid and out-of-scope reports before they reach the customer, and program managers help tune scope and rewards to attract the right talent. Public programs are often launched after a period of private testing, once internal remediation processes are proven, and can run alongside a vulnerability disclosure policy.

Organizations with mature security processes use public programs for continuous, large-scale testing of internet-facing assets and to demonstrate transparency about security.