To get in touch about speaking at your event, email [email protected]
Media Packet
1,042 items across 6 categories — press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
1,042 items
Press
Softpedia reports on Bugcrowd's vulnerability pricing model and reward structure for security researchers. Casey Ellis discusses how the platform's bounty amounts range from $100 to $15,000 depending on the severity of reported vulnerabilities.
Press
A January 2016 article in The Register examines minimum bug bounty pricing thresholds in the security research community. Casey Ellis is cited on how companies must offer competitive rewards to attract top-tier security researchers to serious vulnerability disclosures.
Press
General Motors' bug bounty program drew mixed reactions from security researchers following its launch. Casey Ellis noted concerns about the program's scope and reward structure, highlighting the need for automakers to align incentives with researcher expectations.
Papers
The Ultimate Start-up Guide, published by Crowded Ocean in 2016, is a paper resource for entrepreneurs building new ventures. Casey Ellis appears in the guide in connection with BugCrowd, his crowdsourced security testing platform.
Press
An SF Chronicle article examines the problem of ethical hackers being ignored when they report security vulnerabilities to companies. Casey Ellis discusses the disconnect between security researchers attempting responsible disclosure and organizations that fail to acknowledge or act on their findings.
Press
Fortune reported on a controversial blog post by Oracle's security chief criticizing security researchers for identifying bugs in Oracle products. Casey Ellis commented on the incident, offering perspective on responsible disclosure practices and the importance of constructive dialogue between vendors and the security research community.
Press
Security Weekly #438, an episode of Paul's Security Weekly TV, featured a discussion on bug bounty programs and responsible disclosure practices. Casey Ellis participated in the podcast to examine the mechanics of bug bounties and principles underlying coordinated vulnerability disclosure.
Broadcast
This Week in Enterprise Tech episode 162, broadcast by TWiT.tv on October 19, 2015, examines the Matthew Keys case and the Computer Fraud and Abuse Act. Casey Ellis discusses implications of the CFAA prosecution and its relevance to cybersecurity policy and practice.
Broadcast
This Week in Enterprise Tech episode 162, published by TWiT on October 16, 2015, examines the Matthew Keys case and its implications for the Computer Fraud and Abuse Act. Casey Ellis appears on the show to discuss the controversial case and the CFAA's broader legal and technical dimensions.
Stage
OWASP AppSec California presented a stage talk titled "How building a better hacker accidentally built a better defender" in September 2015. Casey Ellis discusses how developing offensive security skills and mindset inadvertently shaped his approach to defensive work and vulnerability research.
Press
Ozy.com published a feature on new technology for making garage doors smarter and more connected. Casey Ellis contributed insights on how connected home devices can be secured against emerging threats and vulnerabilities.
Broadcast
This Week in Enterprise Tech episode 158, broadcast on TWiT.tv in September 2015, features an in-depth interview with Casey Ellis about Bugcrowd. Ellis discusses the company's approach to crowdsourced security testing and vulnerability disclosure as a method for organizations to identify software risks.
Broadcast
This Week in Enterprise Tech broadcast episode 158, published on the show's YouTube channel in September 2015, features an in-depth interview with Casey Ellis. The episode focuses on Bugcrowd's business model and mission within the enterprise security landscape.
Press
SecurityWeek's Feedback Friday column gathered industry responses to a rant by Oracle's Chief Security Officer against security researchers. Casey Ellis contributed perspective on the controversy surrounding responsible disclosure and researcher accountability in the security community.
Press
A TechTarget article from August 2015 examines widening security vulnerabilities in U.S. government email systems, including a Pentagon breach and related incidents. Casey Ellis is quoted discussing the risks and implications of these email security gaps for federal infrastructure.
Press
Infosecurity Magazine reported in 2015 that Bugcrowd achieved 400% revenue growth, demonstrating rapid expansion in the bug bounty market. Casey Ellis, as Bugcrowd's founder and CEO, led the company through this period of significant commercial growth.
Press
An article in CSO Online covers a security researcher's refusal to disclose a vulnerability to FireEye over a payment dispute. Casey Ellis discussed the tension between researchers and vendors regarding bug bounty compensation and the incentives that drive responsible disclosure practices.
Press
An eWEEK security article from August 2015 reports on Russia being implicated in a breach of White House email systems. Casey Ellis commented on the incident's significance for understanding state-sponsored cyber operations and their operational patterns.
Press
ComputerWeekly published an analysis of a breach affecting United Airlines that examined whether the incident signaled part of a wider espionage operation. Casey Ellis commented on the security implications and broader patterns suggested by the attack.
Press
An eWEEK article from July 2015 examines how software vendors are discovering the value of bug bounty programs as a security practice. Casey Ellis is quoted on the business and security benefits vendors gain from crowdsourced vulnerability discovery and remediation.
Press
SecurityWeek published an article examining Bugcrowd research on the growing adoption of invitation-only bug bounty programs among organizations. Casey Ellis, Bugcrowd's co-founder, contributed data and perspective on why companies are increasingly restricting bounty program access to vetted researchers.
Press
Costanoa Venture Capital closed its second fund at $135 million, according to PE Hub. Casey Ellis was among the founders of Costanoa and participated in the fund's formation during his tenure as an early venture investor.
Press
Startup Beat reported that Costanoa Venture Capital closed a $135 million second fund in July 2015. Casey Ellis is listed as one of the fund's limited partners investing in early-stage technology companies.
Press
CMSwire published an article on assessing the various risks associated with cyberattacks on organizations. Casey Ellis contributes perspectives on how organizations can identify and evaluate cyber threats to their infrastructure and operations.
Press
eSecurity Planet reported on Scottrade's acknowledgment of a data breach that had occurred two years earlier at the financial services firm. Casey Ellis commented on the breach disclosure and its implications for customer data security practices in the financial sector.
Broadcast
A Bugcrowd webinar from May 2015 explores the mechanics of running an effective bug bounty program. Casey Ellis discusses the strategic and practical approaches organizations can use to maximize value from bug bounty initiatives.
Press
CIO Today published an article on May 10, 2015 covering the Scottrade data breach affecting 4.6 million customers whose contact information was compromised. Casey Ellis commented on the breach and its implications for customer data security and incident response procedures.
Press
CSO Online published an opinion piece by Casey Ellis on vulnerability disclosure best practices. Ellis discusses the importance of responsible disclosure processes in protecting organizations and coordinating effective security responses.
Press
A Financial Times feature examines the business of bug bounties and crowdsourced security models in corporate vulnerability management. Casey Ellis provides commentary on how companies can leverage external security researchers to strengthen their cyber hygiene practices.
Press
SC Magazine covered RSA Conference 2015 discussions on bug hunting and responsible vulnerability disclosure practices. Casey Ellis participated in conversations about best practices for reporting security vulnerabilities through established disclosure frameworks and industry standards.