Yelp invites hackers to expose vulnerabilities through bug bounty program
Hackers, start your engines.
Yelp launched a public bug bounty program today, inviting the world’s hackers to pick apart its websites and mobile app in search of vulnerabilities that could affect reviewers and businesses. Yelp will pay researchers for their work, starting at $100 and maxing out at $15,000 for more complex or critical exploits.
The program, which Yelp is coordinating through the bug bounty platform HackerOne, is a public expansion of a bug bounty system that Yelp has privately run for two years. The private version was open to dozens of researchers, who uncovered more than 100 vulnerabilities for Yelp and earned $65,160 in total, and focused primarily on Yelp’s main website. Now, Yelp is inviting everyone to test several Yelp sites and products.
