Operationalizing Secure by Design: a CISO’s guide to closing the gap between policy and reality
We’ve been listening to dozens of CISOs. In roundtables, peer forums, customer and prospect calls, on the record, off the record, at event floors and …
IT Security FAQ 5: What is ethical hacking vs malicious hacking? And what is a bug bounty hunter/program?
Detectify
Comparing ethical hacking to malicious hacking is kind of like comparing the good guys to the bad guys.
Ethical hackers look for vulnerabilities and report them, whereas malicious hackers have a more mischievous agenda. They are the guys you usually see in the movies hacking a bank and stealing money. Ethical hackers are the people working to make the world a safer place – like your favorite team of hackers at Detectify!
Comment from our expert:
“Ethical hackers are security consultants and good hearted people that find vulnerabilities on sites and services and report them to the company to prevent them from being hacked in the future. Many companies offer ”Bug Bounty Programs” where they ask Ethical Hackers to try and hack their sites in order to find loopholes, and in return they get a cash award for it.”
“The bigger the security breach they find, the more money the company is willing to pay. Hackers looking for those kinds of bugs and vulnerabilities on sites to get those kinds of awards are referred to as Bug Bounty Hunters,”
explains Johan Edholm at Detectify.
Want more IT security information? Don’t miss out on the other parts of our IT Sec FAQ series!
Check out more content
Why traditional DAST Tools fail modern AppSec teams (and how to fix it)
For years, development and security practitioners have treated dynamic application security testing as a critical final safety check before code goes live. However, the external …
