Hacking The 0day Market
summary
Crowdfense says it normalizes the chaotic 0day market by running a $10M bug‑bounty (2018) and a dedicated Vulnerability Research Hub (launched Sept 2018) that offers an end-to-end encrypted web app, per‑submission PGP keys and cryptic chats. The intake funnels ~100 submissions to 6–7 viable assets, targets include routers, baseband and messengers, and average exploit shelf‑life is 3–4 months, so the platform reports faster time‑to‑market and objectively higher quality outputs.
AI-written summary · about
chapters (8)
- 0:00Introduction and background
- 2:06Market challenges
- 4:05Supporting researchers
- 6:00Normalizing the business
- 9:20Operational strategies
- 14:17Vulnerability Research Hub
- 17:22Data and insights
- 21:38Results and conclusion
related talks
50mSelling 0-Days to Governments and Offensive Security Companies
36mFrom Bounties to Bureaucracy
39m"Vulnerabilities for Sale - The Good, the Bad and the Ugly"
56mHow Building a Better Hacker Accidentally Built a Better Defender
39mSelling 0-Days to Governments and Offensive Security Companies
30mBeyond Quick Cash: Rethinking Bug Bounties for...
53mFive Years of 'Make 0Day Hard'
12mAre Users Able to Take Control of Their Data?