title: A Bug Hunter's Diary: A Guided Tour Through the Wilds of Software Security
author:  Tobias Klein 
description: <b>Tobias Klein</b> is a security researcher and founder of NESO Security Labs, an information security consulting and research company based in Heilbronn, Germany. He is the author of two information security books published in German by dpunkt.verlag of Heidelberg, Germany.
zlib_text: H AC K E R O N E
  H AC K E R - P O W E R E D  S E C U R I T Y  R E P O R T  2 017
  Executive Summary
  Hacker-Powered Security: a  report drawn from 800+ programs 
  and nearly 50,000 resolved security vulnerabilities.
  Bug bounty and hacker-powered security programs are becoming 
  the norm, used by organizations as diverse as Facebook and the U.S. 
  government. Forty-one percent of bug bounty programs were from 
  industries other than technology in 2016. Top companies are rewarding 
  hackers up to $900,000 a year in bounties and bounty rewards on 
  average have increased 16 percent for critical issues since 2015. Despite 
  bug bounty program adoption and increased reward competitiveness, 
  vulnerability disclosure programs still lag behind. Ninety-four percent of 
  the Forbes Global 2000 companies do not have policies. 
  It’s time to give security teams the tools they need to keep up with ever-
  faster development. This report examines the broadest platform data set 
  available and explains why organiz