HackerOne TTS & GSA integration

18F / bug-bounty

OUT OF DATE: Internal documentation for TTS's bug bounty.

https://github.com/18F/tts-tech-portfolio/issues/49

Other

9 stars 5 forks source link

HackerOne TTS & GSA integration #41

Closed its-a-lisa-at-work closed 3 years ago

its-a-lisa-at-work commented 3 years ago

Background Information

Implementation Steps

[x] Notify GSA that we're interested in understanding their efforts
[x] Figure out costs
[x] Figure out timelines

Acceptance Criteria

[x] Documented path forward with how to proceed with merging the two programs

its-a-lisa-at-work commented 3 years ago

Provided GSA IT Security asked for the following information:

[x] breakdown of costs for maintaining the TTS program
[x] as well as any metrics on the number of findings reported

Got that started in the document for the Bug Bounty Options

Will update the document with

[x] monthly bounty costs
[x] refine the metrics on the findings per asset

its-a-lisa-at-work commented 3 years ago

Heard back from GSA IT Security

I spoke to Armando and unfortunately there is no money in his budget that can be used to support the current TTS applications/program until FY22.

Hopefully we can work together to establish a transition plan to combine the programs for an efficient consolidation at that time.

Please let me know if there is anything I can do to help in the meantime.

Thanks!

Creating a new card Bug Bounty Transfer to GSA IT Security 18F/tts-tech-portfolio#1224