Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Podcast: Bugcrowd Founder on Printer Bugs, IoT Bounty Hunting, and New VDP Project
Threatpost published a podcast interview with Bugcrowd founder Casey Ellis in August 2018. Ellis discussed printer security vulnerabilities, the emerging market for IoT bug bounties, and the launch of the disclose.io vulnerability disclosure standardization project.
Open Source Disclose.io framework bridges legal gap in bug reporting
The Daily Swig reports on the launch of the open-source disclose.io project, an initiative to standardize legal safe harbor language for security researchers disclosing vulnerabilities. Casey Ellis co-founded the framework to address the legal gap that researchers face when reporting bugs to organizations without established disclosure policies.
Bug bounties offer legal safe harbor. Right? Right?
CSO Online published this August 2018 article examining how many bug bounty programs omit legal safe harbor protections for good-faith security researchers. Casey Ellis, Bugcrowd's founder, is quoted saying that finding vulnerabilities can frighten software builders but is necessary to compete with adversaries, while Bugcrowd launched Disclose.io to standardize safe harbor practices.
TSMC recovers from WannaCry infection. OpenEMR fixes 30 bugs. UK will ask Russia to extradite two GRU operators for Novichok attacks. Twitterbots flourish.
The CyberWire Daily podcast from August 7, 2018 covers TSMC's recovery from WannaCry, OpenEMR bug fixes, UK extradition requests against GRU operators, and the rise of twitterbots. Casey Ellis provides analysis on the week's major security stories, including TSMC's response to the WannaCry outbreak.
Bugcrowd launches Disclose.io to provide a safe harbor for white hat hackers
HelpNetSecurity reported on Bugcrowd's launch of Disclose.io, a project designed to provide legal protection for security researchers conducting vulnerability disclosure. Casey Ellis co-founded the initiative to establish safe harbor policies that protect white hat hackers from legal liability when they report security vulnerabilities responsibly.
Open source project looks to give legal safe harbor for ethical hackers
This CyberScoop article from August 2018 covers Disclose.io, an open source project offering standardized legal safe harbor terms for ethical hackers in bug bounty and vulnerability disclosure programs. Bugcrowd founder and CTO Casey Ellis is quoted saying standardized terms reduce legal and reputational risk while still attracting skilled researchers.
New open source effort: Legal code to make reporting security bugs safer
Ars Technica reported on the launch of disclose.io, an open-source project that provides standardized legal language for security vulnerability reporting. Casey Ellis co-founded the initiative to reduce legal risks researchers face when disclosing bugs to organizations.
Bug hunters aplenty but respect scarce for white hat hackers in India
Factor Daily published an article examining India's growing prominence in the bug bounty sector and its active community of security researchers. Casey Ellis is cited as a key voice on the state of bug bounty programs and their role in improving security practices globally.
Bugcrowd CTO on the need for responsible disclosure policy, 'good faith' | TechTarget
This TechTarget feature, a July 31, 2018 article by Rob Wright, covers remarks by Bugcrowd founder and CTO Casey Ellis at RSA Conference 2018. Ellis says the "good faith" between security researchers and enterprises is in jeopardy, sees growing friction in vulnerability research, and argues responsible disclosure policy matters more than ever.
Bugcrowd to boost Australian presence
ITNews reported on Bugcrowd's expansion plans in Australia, including details of the company's growing operations in the region. Casey Ellis discussed the company's strategy to strengthen its footprint and serve the Australian security market more effectively.
Bugcrowd CEO on the need for responsible disclosure policy, good faith (reached out for correction)
An interview published by TechTarget features Bugcrowd CEO Casey Ellis discussing responsible disclosure policies and good-faith engagement within the security community. Ellis emphasizes the importance of clear disclosure frameworks that balance researcher protections with organizational accountability in vulnerability handling.
Ep 017.5 - Bug Bounties with Casey Ellis of BugCrowd
ThugCrowd podcast episode 017.5 features a discussion on bug bounties released July 15, 2018. Ellis provides a detailed overview of the bug bounty process from the platform provider perspective, covering how vulnerability coordination programs operate and their implementation strategies.
Nine Australian cyber security startups raising money and kicking goals
Smart Company published a feature on nine Australian cybersecurity startups raising funds and achieving growth milestones. Bugcrowd was included among the startups profiled for its expansion and fundraising success in the crowdsourced security testing sector.
Bugcrowd CTO explains crowdsourced security benefits and challenges
TechTarget published an interview with Bugcrowd's CTO discussing crowdsourced security in July 2018. Ellis outlines the advantages and obstacles inherent in Bugcrowd's crowdsourced security model for identifying and addressing vulnerabilities at scale.
Bug Bounty Payouts Up 73% Per Vulnerability: Bugcrowd
Dark Reading published a report on Bugcrowd data showing that average bug bounty payouts per vulnerability increased 73% over a measured period. Casey Ellis, Bugcrowd co-founder and CTO, contributed to the analysis demonstrating growth in the security researcher compensation market and industry recognition of vulnerability disclosure value.
U.S. companies dont fear these foreign hackers
WRCBtv published a 2018 article examining how U.S. companies engage foreign hackers through bug bounty programs to strengthen their defenses. Casey Ellis discusses the role of coordinated vulnerability disclosure in building trust between companies and security researchers across borders.
Crowdsourcing Cybersecurity
A CXO Magazine article examines crowdsourcing and bug bounty programs as strategies to address the cybersecurity talent shortage. Casey Ellis discusses how organizations can leverage external security researchers and structured vulnerability disclosure to strengthen their defenses and expand their security capabilities.
Bugcrowd chief says Australia must embrace risk to keep top cyber firms at home
An Australian Financial Review article features Bugcrowd chief Casey Ellis discussing Australia's cybersecurity sector retention challenges. Ellis argues that Australia must adopt a more risk-tolerant approach to keep top cyber talent and firms within the country rather than losing them overseas.
Open Source Collaborative Hopes to Make Reporting Security Bugs Safer for All
An article from Total Security Advisor covers the disclose.io initiative, an open source collaborative effort to standardize safe vulnerability disclosure practices. Casey Ellis founded the project to establish shared agreements that protect security researchers and encourage responsible bug reporting across organizations.
Crowded Security Payouts to hackers increase
HelpNetSecurity published an article covering findings from a Bugcrowd report on crowdsourced security industry trends, including payout data and researcher demographics. Casey Ellis contributed insights on the growing payouts to hackers participating in bug bounty and vulnerability disclosure programs.
The Hacker’s Perspective: Building Cyber Resiliency
Casey Ellis delivered remarks at cyber:secured Forum's 2018 event on building cyber resiliency from a hacker's perspective. His presentation drew on practical security insights to help organizations understand and strengthen their defensive posture against real-world threats.
Severe Flaws Drive Rise in Bug Bounty Payouts, Bugcrowd Reports
Bugcrowd released a report, covered in eWEEK, analyzing trends in bug bounty program payouts and vulnerability severity. Casey Ellis, Bugcrowd cofounder and CTO, contributed insights on how increased discovery of severe flaws was raising average payouts across the industry.
U.S. companies dont fear these foreign hackers - they pay them
NBC News published a 2018 feature on India's growing community of white-hat hackers who earn income through bug bounty programs. Casey Ellis is cited as an authority on how security researchers in emerging markets participate in coordinated vulnerability disclosure and responsible hacking initiatives.
Uber Answers for Data Breach, Alleged Cover Up in Senate Probe
Bloomberg reported on Uber's official responses and testimony to the Senate regarding its handling of a 2016 data breach. The coverage examined how Uber disclosed and managed the incident, including allegations about the company's initial handling and communication surrounding the breach.
Ubers Response to 2016 Data Breach Was Legally Reprehensible, Lawmaker Says
Dark Reading reported on a lawmaker's criticism of Uber's response to its 2016 data breach, characterizing the company's handling as legally reprehensible. Casey Ellis commented on the incident and its implications for corporate breach response standards and accountability.
ZipperDown vulnerability puts thousands of iOS apps at risk,
App Developer Magazine reported on the ZipperDown vulnerability, which exposed thousands of iOS applications to the risk of malicious code injection. Casey Ellis identified and disclosed the security flaw affecting iOS app distribution systems.
State department bug bounty gets rare thumbs up
This Axios article from May 15, 2018 covers a proposed State Department bug bounty bill that cleared the House Foreign Affairs Committee. Casey Ellis, founder and CTO of Bug Crowd, says the bill might pass muster because it gives State a full year to build its program, unlike older bills with 90-day deadlines.
The Vulnerability Disclosure Process: Still Broken
Threatpost published an article examining persistent flaws in the vulnerability disclosure process on May 9, 2018. Casey Ellis contributed perspective on the ongoing challenges affecting how security researchers and vendors communicate and resolve vulnerabilities.
Highwire Cybersecurity Panel: Scoping Out the Security Space (RSA 2018)
Highwire hosted a cybersecurity panel discussion at RSA 2018 and published it on YouTube. Casey Ellis participated in the discussion, offering perspectives on the current state and emerging trends in the cybersecurity industry.
Road Trip! RSA Conference 2018 Recap
ITSPmagazine published a recap of the 2018 RSA Conference covering highlights and key themes from the event. Casey Ellis participated in discussions at the conference addressing cybersecurity topics and industry trends.