YesWeHack is a global security company that provides a crowdsourced platform for bug bounty programs, allowing ethical hackers to report security exploits and vulnerabilities.

YesWeHack

YesWeHack is a leading Bug Bounty and Vulnerability Management Platform. Founded by ethical hackers in 2015, YesWeHack connects organisations worldwide to tens of thousands of ethical hackers, who uncover vulnerabilities in websites, mobile apps, connected devices and digital infrastructure.

Bug Bounty programs benefit from in-house triage, personalised support, a customisable model and results-based pricing. Clients include ZTE, Tencent, Swiss Post, Orange France and the French Ministry of Armed Forces.

The YesWeHack platform offers a range of integrated, API-based solutions: Bug Bounty (crowdsourcing vulnerability discovery); Vulnerability Disclosure Policy (creating and managing a secure channel for external vulnerability reporting); Pentest Management (managing pentest reports from all sources); Attack Surface Management (continuously mapping online exposure and detecting attack vectors); and ‘Dojo’ and YesWeHackEDU (ethical hacking training).

YesWeHack complies with strict security, financial traceability and privacy requirements. YesWeHack’s services are ISO 27001- and ISO 2701-certified and accredited by CREST. YesWeHack’s infrastructure uses EU-based, GDPR-compliant private hosting that meets the most stringent standards: ISO 27001, ISO 27017, ISO 27018, ISO 27701 and SOC II Type 2. The YesWeHack platform is also permanently subject to a public Bug Bounty Program.

Find out more at www.yeswehack.com

Normandie Participations

Open CNP

Banque des Territoires

CNP Assurances

Eiffel Investment Group

🤩 We are all ready for Cybersec Asia in Bangkok! 
 
Swing by booth B14 today and tomorrow - our experts Eileen Neo and Marcelyn Wijaya are eager to share about the benefits of #BugBounty and #VulnerabilityManagement. Did we also mention we're giving away our cool swags? 🎁
 
Whether you're new to crowdsourced #cybersecurity, or already have experience running programs, we would love to chat and answer any questions you may have! 👋

If you're hunting regularly on YesWeHack, you're likely familiar with our quarterly tradition. At the close of each quarter, our team sends you special posters recognising outstanding performances on our platform. We've invested time and effort into revamping our posters, ensuring they truly reflect and celebrate your exceptional work. And because, without a doubt, you're the ⭐ stars ⭐ of our platform, hackers, we are excited to unveil our new, space-inspired posters!

Presenting Celestial Planner! This poster keeps acknowledging the consistency of a hacker's journey on the YesWeHack platform. It will be granted to bug hunters who maintain a top 5 position on our leaderboard for six months. Following Star Gazer's initiation of scanning the galaxy for astral bodies, the Celestial Planner meticulously plans his travel through the stars – marking the second step of this cosmic expedition. 👩‍🚀🗺

📢 We are delighted to reveal that YesWeHack is now CREST-accredited for penetration testing services delivered in Europe, Africa, Asia and the Middle East.

Read the announcement to learn how we established our compliance with stringent, internationally recognised requirements, and what the certification means for customers and prospective customers. 🔒

The news follows the announcement that YesWeHack's Information Security Management System (ISMS) is now officially compliant with ISO/IEC 27017, a globally recognised standard for cloud security controls. ⛅

Find out more here 👇

🔧 #BugBountyToolkit: Supercharge your Burp Suite with these must-have extensions:

1️⃣ AutoComplete: Speed up with BurpSuiteAutoCompletion & HopLa for headers & payloads - https://lnkd.in/dq9RZszc | https://lnkd.in/dp-RJS_8

2️⃣ GraphQL: Tackle complex GraphQL with InQL for introspection & mutations - https://lnkd.in/dAdvA2e

3️⃣ SSRF: Find hidden SSRF with Collaborator Everywhere's non-invasive headers - https://lnkd.in/dAFsmdVT

4️⃣ AES Traffic: Decrypt AES on-the-fly with AES Killer, assuming you have the keys - https://lnkd.in/dRfVQc5

5️⃣ HTTP Methods: Discover hidden methods with HTTP Methods Discloser - https://lnkd.in/dHw5_qpJ

6️⃣ JWT: Crack JWTs effortlessly with JWT4B - https://lnkd.in/dtYguV_y

7️⃣ 403 Bypass: Navigate past 403s with 403Bypasser - https://lnkd.in/di65TQYm

8️⃣ Integration: FFUF with Copy As FFUF - https://lnkd.in/dWzKEjaU

9️⃣ Workflow: Streamline processes with Stepper, Repeater Tab Highlighter, and ReshaperForBurp - https://lnkd.in/eyBiWux | https://lnkd.in/gxry4SY | https://lnkd.in/ehhsprTa

🔟 Recon: Organize your recon with Burp Scope Monitor and Domain Hunter Pro, and analyze source maps with Source-Mapper. https://lnkd.in/dp2BHjrt | https://lnkd.in/dfGfrrET | https://lnkd.in/dBPT36iu

🤩 Our bug hunting community is on fire - another box has been ticked on our bucket list!

Hats off to asp, who claimed the top reward on a public #BugBounty program after submitting a report on January 2nd! What a great 2024 resolution 🤘

There are still plenty of exciting opportunities to demonstrate your skills and receive some great swag. Who will be next? #YesWeRHackers

COM:YESWEHACK

YesWeHack