Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Bugcrowd Releases Open Source Vulnerability Disclosure Framework
Bugcrowd released an open-source vulnerability disclosure framework as covered by ThreatPost. The framework provides standardized guidance for organizations and security researchers to establish responsible disclosure practices and protect researcher safety during vulnerability reporting.
Welcome to the blue team! How building a better hacker accidentally built a better defender.
Casey Ellis spoke at Converge Detroit 2014 on the relationship between offensive and defensive security practices. He discussed how the process of building stronger attackers inadvertently strengthens defenders and the practical lessons that emerge from that dynamic.
Bugcrowd adds flex pricing model to bug-bounty programs
Network World reported on Bugcrowd's introduction of a flexible pricing model for bug bounty programs. Casey Ellis, Bugcrowd's founder, explained how the new model allows organizations to adjust spending based on vulnerability severity and program needs.
Bugcrowd Launches New Security Testing Program
A Security Week press item from June 2014 announces the launch of Bugcrowd's new crowdsourced security testing program. Casey Ellis, as Bugcrowd's founder, led the development of this platform to connect organizations with independent security researchers for vulnerability discovery.
Crowdsourcing Finding Its Security Sweet Spot
ThreatPost published an article examining how crowdsourcing has become an increasingly accepted model within the cybersecurity industry. Casey Ellis discusses the maturation of crowdsourced security approaches and their growing adoption as organizations recognize their practical value for vulnerability discovery.
Experts tout benefits of bug bounty program outsourcing
A TechTarget article from June 2014 examines the advantages of outsourcing bug bounty programs to dedicated platforms. Casey Ellis is quoted discussing how outsourcing to platforms like Bugcrowd allows organizations to access broader researcher networks and reduce operational overhead in managing vulnerability disclosure programs.
OpenSSL bug hunt: Find NEXT Heartbleed, earn $$$ – if enough people donate cash
This April 2014 article from The Register reports on a crowdfunded OpenSSL bug bounty prompted by Heartbleed. Bugcrowd chief executive Casey Ellis says the effort is independent of OpenSSL, whose developers are aware of it but busy, and any bugs found would go exclusively to the library's team before responsible disclosure.
Stopping another Heartbleed: This Aussie startup is gathering global developers to squash OpenSSL bugs
This April 2014 SmartCompany article reports on BugCrowd, an Australian startup recruiting global developers to search OpenSSL code for flaws after Heartbleed. Founder Casey Ellis wrote an open letter arguing that many eyes and the right incentive make bugs shallow, and the campaign offers monetary prizes to people who find flaws.
5500 hackers + Your code = ???
A 2014 SOURCEconf Boston stage presentation titled "5500 hackers + Your code = ????" explores the intersection of bug bounty programs and developer security practices. Ellis discusses how large-scale hacker communities can identify and responsibly report vulnerabilities in production code.
World Cup Tech Challenge seeking startups to come pitch to VCs in Silicon Valley
SmartCompany's StartupSmart reported in March 2014 that the World Cup Tech Challenge is seeking 30 startups to pitch to venture capital investors in Silicon Valley. Casey Ellis, a crowdsourced security startup cofounder, told StartupSmart that pitching to American audiences was challenging, since Americans are expected to be very over the top and in control.
How to make money finding bugs in software
This BBC News article from February 2014 examines how companies pay independent security researchers through bug bounty programmes to find software vulnerabilities. Casey Ellis, who founded and oversees the Bugcrowd community, says cash rewards attract more testers and higher-quality researchers, and he argues that everyone should have a bounty programme of some sort.
Node Summit 2013 - Bugcrowd Workshop - How to Run a Kick Ass Bug Bounty Program
A workshop video from Node Summit 2013 published on Vimeo presents Casey Ellis leading a hands-on session on bug bounty program management. Ellis covers practical steps for developers and companies to launch and operate effective bug bounty initiatives.
After the Accelerator: Bugcrowd on learning how to speak American to investors and customers
This SmartCompany article by Rose Powell, published in November 2013, profiles Bugcrowd, the start-up co-founded by Casey Ellis. Ellis says engaging American investors and customers has been the biggest challenge since moving his company and family to the US, and he recalls a discouraging first month of rejection that affected many Startmate teams.
Sydney security startup Bugcrowd gains $1.6m to help herd hackers - ZDNET
A September 2013 ZDNet article reports that Sydney startup Bugcrowd raised a $1.6 million seed round from investors including Icon Venture Partners and Square Peg Capital. Casey Ellis, who co-founded Bugcrowd with Sergei Belakomen and Chris Raethke, is quoted valuing seed investors for their expertise and connections as well as their capital.
Sydney's Bugcrowd raises $1.6 million
This iTnews article by Darren Pauli, published September 5, 2013, reports that Sydney startup BugCrowd has raised $1.6 million from US financial backers. Casey Ellis co-founded the company with Serg Belakomen, and it launched in January as one of the first managed bug bounty services on the market.
Bugcrowd raises $1.6 million by mastering the cultural differences between Australian and US investors
This SmartCompany article from September 2013 reports on Bugcrowd, a crowdsourced security testing marketplace, raising $1.6 million in funding. Co-founder Casey Ellis explains that pitching to US investors demanded a far more confident style than Australians typically use, and that the team had to significantly rework its pitch.
Startup Bugcrowd Raises $1.6 Million To Pay Hacker Hordes To Hunt Clients' Bugs
This Forbes article by Andy Greenberg, published September 4, 2013, covers Bugcrowd, a startup that raised $1.6 million to pay hackers for finding client bugs. Casey Ellis, Bugcrowd's chief executive, describes its bug bounty contests, which reward the first hacker to report a flaw with cash and recognition.
Bugcrowd Raises $1.6 Million To Expand Bug Bounty Marketplace | TechCrunch
TechCrunch reported on September 4, 2013, that crowdsourced bug bounty marketplace Bugcrowd had raised $1.6 million to expand its community of vetted security testers. Casey Ellis co-founded the Sydney-based startup with security researchers Sergei Belakomen and Chris Raethke, and it graduated from the Startmate accelerator in 2011.
Facebook was right to not pay Streateh
Facebook was right to not pay Streateh is an article by Casey Ellis published by iTnews, a technology news site, in its Security section on 23 August 2013. Ellis argues Facebook deserves credit for not paying Khalil Streateh for reporting a vulnerability, despite the likely negative reaction.
To disclose or not to disclose? The hacker question
This 2013 article in The Sydney Morning Herald examines how long software vendors should have to patch a vulnerability before researchers publicly disclose it. Casey Ellis, CEO of Bugcrowd, says researchers may resort to full disclosure after patch deadlines pass unmet, and he credits Google's seven-day policy with making patches a higher priority.
How Bug Bounty Programs Bring Big Savings and Better Security
This CIO article from July 2013 examines how enterprise bug bounty programs pay hackers who report security flaws. Casey Ellis, CEO of Bugcrowd, says such programs are much more cost effective than paying penetration testers or consultants, and he reports up to five times as many vulnerabilities found for the same spend.
Most Likely to Succeed” - Winner
Bugcrowd, founded by Casey Ellis, won the "Most Likely to Succeed" award at SVForum's Launch: Silicon Valley 2013 event, competing against over 300 startups in the Next Generation Internet category. The award recognized the company's potential in the crowdsourced security and vulnerability disclosure space.
Presenting Bugcrowd (Winner: Most Innovative Company)
Bugcrowd was presented as the winner of Most Innovative Company at LAUNCH Silicon Valley in June 2013. Ellis, as Bugcrowd's founder, outlined the company's model for connecting security researchers with organizations to identify vulnerabilities through crowdsourced testing.
Coles bitten by the hacker bug
The Sydney Morning Herald's 2013 article, titled Coles bitten by the hacker bug, profiles Bugcrowd, a bug bounty firm that recruits security testers to probe software. Co-founder Casey Ellis, raising the company's first funding round in the US, says Bugcrowd has grown faster than anticipated and describes it as restoring balance to attackers' advantage.
Bounty hunters hound out computer bugs
The Sydney Morning Herald's article "Bounty hunters hound out computer bugs," published 14 February 2013, covers bug bounty programs that reward hackers for finding security holes. Founder Casey Ellis says cost-effectiveness is the strongest selling point, citing findings per dollar against consultants and noting the model could suit smaller businesses.
Mixing crowdsourcing and security to help hack for good: Bugcrowd - ZDNET
This ZDNet article from January 2013 profiles Bugcrowd, an Australian crowdsourced security startup that pairs businesses with well-intentioned hackers. Casey Ellis, who co-founded the company with Serg Belokamen, says many participants are testers by day who hack for passion, and hopes the reputation system helps newcomers show employers their skills.
BugCrowd brings bounties to the masses
This iTnews article from January 15, 2013, by Darren Pauli reports on the launch of Bugcrowd, a managed service that simplifies setting up bug bounty programs. Casey Ellis, who runs the service with Serg Belokamen, describes it as a way to connect global security testers with businesses through crowd-sourcing.
Remote Desktop Protocol security hole: 5 unanswered questions
CSO Magazine published "Remote Desktop Protocol security hole: 5 unanswered questions" examining five key questions about a critical vulnerability in Microsoft's Remote Desktop Protocol. Casey Ellis addresses the technical details and security implications of the RDP flaw, offering perspective on what organizations should understand about the threat.
Yellow alert! Windows RDP flaw explained
ZDNet published "Yellow alert! Windows RDP flaw explained" on March 18, 2012, detailing a significant vulnerability in Windows Remote Desktop Protocol and its security implications. Casey Ellis contributed analysis and explanation of the flaw's risks and technical scope.
Microsoft patches Remote Desktop Protocol hole but danger remains
SC Magazine reported on Microsoft's patch for a Remote Desktop Protocol vulnerability, published on March 16, 2012. The article examines ongoing security risks related to the vulnerability despite the release of the patch.