2018 Milestones and Upcoming Plans
Hi folks,
This great year is about to end, and we are here to make a brief summary about the main milestones of 2018 and to share some of our plans for the future.
So far, over 7,700 security researchers found and helped fixing over 165,000 security vulnerabilities following our guidelines of non-intrusive testing.
Security vulnerabilities (mostly XSS) were reported on 992 websites out of 1000 from Alexa Top 1000 websites. Their current average patch rate is now 89.4%.
An average vulnerability patching time (for all websites) went down from 189 days in 2017 to 62 in 2018, almost a 300% increase, emphasizing continuously improving submissions quality. Rating of our fastest fixes is now dominated by patches made in less than 15 mins.
Since the launch of open bug bounty programs for website owners in August 2018, 274 bug bounty programs were created and are currently running with over 766 websites. One can start an open bug bounty program (at no cost) here:
https://www.openbugbounty.org/bugbounty/create/
Highest (publicly disclosed) voluntary payment to a researcher was $15,000 so far. Some of the highlighted (publicly disclosed) awards and gratitudes are listed here:
https://www.openbugbounty.org/community-voice/
Quantity of new security researchers (reporting at least one vulnerability a week) increased by almost 200% compared to 2017.
To facilitate even a better and faster contact between website owners and researchers, we plan to provide national CERTs with free API for our database (without vulnerability details - that belong to the researchers). Integration with JIRA and other bugtracking tools are also coming.
Otherwise, we remain open, non-commercial and transparent, putting in touch website owners and security researchers from all over the world.
Thanks for staying with us and helping making web a safer place! Have a safe 2019 and please spread a good word about OBB if you like it ;]
Yours,
OBB Team
This great year is about to end, and we are here to make a brief summary about the main milestones of 2018 and to share some of our plans for the future.
So far, over 7,700 security researchers found and helped fixing over 165,000 security vulnerabilities following our guidelines of non-intrusive testing.
Security vulnerabilities (mostly XSS) were reported on 992 websites out of 1000 from Alexa Top 1000 websites. Their current average patch rate is now 89.4%.
An average vulnerability patching time (for all websites) went down from 189 days in 2017 to 62 in 2018, almost a 300% increase, emphasizing continuously improving submissions quality. Rating of our fastest fixes is now dominated by patches made in less than 15 mins.
Since the launch of open bug bounty programs for website owners in August 2018, 274 bug bounty programs were created and are currently running with over 766 websites. One can start an open bug bounty program (at no cost) here:
https://www.openbugbounty.org/bugbounty/create/
Highest (publicly disclosed) voluntary payment to a researcher was $15,000 so far. Some of the highlighted (publicly disclosed) awards and gratitudes are listed here:
https://www.openbugbounty.org/community-voice/
Quantity of new security researchers (reporting at least one vulnerability a week) increased by almost 200% compared to 2017.
To facilitate even a better and faster contact between website owners and researchers, we plan to provide national CERTs with free API for our database (without vulnerability details - that belong to the researchers). Integration with JIRA and other bugtracking tools are also coming.
Otherwise, we remain open, non-commercial and transparent, putting in touch website owners and security researchers from all over the world.
Thanks for staying with us and helping making web a safer place! Have a safe 2019 and please spread a good word about OBB if you like it ;]
Yours,
OBB Team
Re: 2018 Milestones and Upcoming Plans
Excited to be part of a good cause. ![Smile :)](./images/smilies/icon_e_smile.gif)
![Smile :)](./images/smilies/icon_e_smile.gif)
Re: 2018 Milestones and Upcoming Plans
awesome
u deffo need a news page to refer to for such information
![Smile :)](./images/smilies/icon_e_smile.gif)
u deffo need a news page to refer to for such information
-
- Posts:68
- Joined:Sun Aug 05, 2018 6:52 pm
Re: 2018 Milestones and Upcoming Plans
Congratulations to you all ![Mr. Green :mrgreen:](./images/smilies/icon_mrgreen.gif)
![Mr. Green :mrgreen:](./images/smilies/icon_mrgreen.gif)
Re: 2018 Milestones and Upcoming Plans
<3 nice
Congratulations
2019 will be even better
Congratulations
2019 will be even better
-
- Posts:12
- Joined:Tue Mar 12, 2019 10:53 pm
Re: 2018 Milestones and Upcoming Plans
With no publicity, I'm just wondering, how do you manage to keep the lights on?
cheers
cheers
Re: 2018 Milestones and Upcoming Plans
2020
I hope you have a direct chat in 2020.
I hope you have a direct chat in 2020.
No Bug No Fun
HackMoD
HackMoD
Re: 2018 Milestones and Upcoming Plans
2022 nothing happened, looks like they are not doing anything anymore.
To reply to this, thread, you need to fix the textarea with the chrome F12 console.
The Textarea is delivered as "<textareaname=message...>" instead of "<textarea name=message...>"
![Image](https://snipboard.io/GN4rlb.jpg)
To reply to this, thread, you need to fix the textarea with the chrome F12 console.
The Textarea is delivered as "<textareaname=message...>" instead of "<textarea name=message...>"
![Image](https://snipboard.io/GN4rlb.jpg)
Who is online
Users browsing this forum: Bing [Bot], r00t3d and 2 guests