Casey Ellis, on the record.
1,435 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
How to make money finding bugs in software
This BBC News article from February 2014 examines how companies pay independent security researchers through bug bounty programmes to find software vulnerabilities. Casey Ellis, who founded and oversees the Bugcrowd community, says cash rewards attract more testers and higher-quality researchers, and he argues that everyone should have a bounty programme of some sort.
Node Summit 2013 - Bugcrowd Workshop - How to Run a Kick Ass Bug Bounty Program
A workshop video from Node Summit 2013 published on Vimeo presents Casey Ellis leading a hands-on session on bug bounty program management. Ellis covers practical steps for developers and companies to launch and operate effective bug bounty initiatives.
After the Accelerator: Bugcrowd on learning how to speak American to investors and customers
This SmartCompany article by Rose Powell, published in November 2013, profiles Bugcrowd, the start-up co-founded by Casey Ellis. Ellis says engaging American investors and customers has been the biggest challenge since moving his company and family to the US, and he recalls a discouraging first month of rejection that affected many Startmate teams.
Sydney security startup Bugcrowd gains $1.6m to help herd hackers - ZDNET
A September 2013 ZDNet article reports that Sydney startup Bugcrowd raised a $1.6 million seed round from investors including Icon Venture Partners and Square Peg Capital. Casey Ellis, who co-founded Bugcrowd with Sergei Belakomen and Chris Raethke, is quoted valuing seed investors for their expertise and connections as well as their capital.
Sydney's Bugcrowd raises $1.6 million
This iTnews article by Darren Pauli, published September 5, 2013, reports that Sydney startup BugCrowd has raised $1.6 million from US financial backers. Casey Ellis co-founded the company with Serg Belakomen, and it launched in January as one of the first managed bug bounty services on the market.
Bugcrowd raises $1.6 million by mastering the cultural differences between Australian and US investors
This SmartCompany article from September 2013 reports on Bugcrowd, a crowdsourced security testing marketplace, raising $1.6 million in funding. Co-founder Casey Ellis explains that pitching to US investors demanded a far more confident style than Australians typically use, and that the team had to significantly rework its pitch.
Startup Bugcrowd Raises $1.6 Million To Pay Hacker Hordes To Hunt Clients' Bugs
This Forbes article by Andy Greenberg, published September 4, 2013, covers Bugcrowd, a startup that raised $1.6 million to pay hackers for finding client bugs. Casey Ellis, Bugcrowd's chief executive, describes its bug bounty contests, which reward the first hacker to report a flaw with cash and recognition.
Bugcrowd Raises $1.6 Million To Expand Bug Bounty Marketplace | TechCrunch
TechCrunch reported on September 4, 2013, that crowdsourced bug bounty marketplace Bugcrowd had raised $1.6 million to expand its community of vetted security testers. Casey Ellis co-founded the Sydney-based startup with security researchers Sergei Belakomen and Chris Raethke, and it graduated from the Startmate accelerator in 2011.
Facebook was right to not pay Streateh
Facebook was right to not pay Streateh is an article by Casey Ellis published by iTnews, a technology news site, in its Security section on 23 August 2013. Ellis argues Facebook deserves credit for not paying Khalil Streateh for reporting a vulnerability, despite the likely negative reaction.
To disclose or not to disclose? The hacker question
This 2013 article in The Sydney Morning Herald examines how long software vendors should have to patch a vulnerability before researchers publicly disclose it. Casey Ellis, CEO of Bugcrowd, says researchers may resort to full disclosure after patch deadlines pass unmet, and he credits Google's seven-day policy with making patches a higher priority.
How Bug Bounty Programs Bring Big Savings and Better Security
This CIO article from July 2013 examines how enterprise bug bounty programs pay hackers who report security flaws. Casey Ellis, CEO of Bugcrowd, says such programs are much more cost effective than paying penetration testers or consultants, and he reports up to five times as many vulnerabilities found for the same spend.
Most Likely to Succeed” - Winner
Bugcrowd, founded by Casey Ellis, won the "Most Likely to Succeed" award at SVForum's Launch: Silicon Valley 2013 event, competing against over 300 startups in the Next Generation Internet category. The award recognized the company's potential in the crowdsourced security and vulnerability disclosure space.
Presenting Bugcrowd (Winner: Most Innovative Company)
Bugcrowd was presented as the winner of Most Innovative Company at LAUNCH Silicon Valley in June 2013. Ellis, as Bugcrowd's founder, outlined the company's model for connecting security researchers with organizations to identify vulnerabilities through crowdsourced testing.
Coles bitten by the hacker bug
The Sydney Morning Herald's 2013 article, titled Coles bitten by the hacker bug, profiles Bugcrowd, a bug bounty firm that recruits security testers to probe software. Co-founder Casey Ellis, raising the company's first funding round in the US, says Bugcrowd has grown faster than anticipated and describes it as restoring balance to attackers' advantage.
Bounty hunters hound out computer bugs
The Sydney Morning Herald's article "Bounty hunters hound out computer bugs," published 14 February 2013, covers bug bounty programs that reward hackers for finding security holes. Founder Casey Ellis says cost-effectiveness is the strongest selling point, citing findings per dollar against consultants and noting the model could suit smaller businesses.
Mixing crowdsourcing and security to help hack for good: Bugcrowd - ZDNET
This ZDNet article from January 2013 profiles Bugcrowd, an Australian crowdsourced security startup that pairs businesses with well-intentioned hackers. Casey Ellis, who co-founded the company with Serg Belokamen, says many participants are testers by day who hack for passion, and hopes the reputation system helps newcomers show employers their skills.
BugCrowd brings bounties to the masses
This iTnews article from January 15, 2013, by Darren Pauli reports on the launch of Bugcrowd, a managed service that simplifies setting up bug bounty programs. Casey Ellis, who runs the service with Serg Belokamen, describes it as a way to connect global security testers with businesses through crowd-sourcing.
Remote Desktop Protocol security hole: 5 unanswered questions
CSO Magazine published "Remote Desktop Protocol security hole: 5 unanswered questions" examining five key questions about a critical vulnerability in Microsoft's Remote Desktop Protocol. Casey Ellis addresses the technical details and security implications of the RDP flaw, offering perspective on what organizations should understand about the threat.
Yellow alert! Windows RDP flaw explained
ZDNet published "Yellow alert! Windows RDP flaw explained" on March 18, 2012, detailing a significant vulnerability in Windows Remote Desktop Protocol and its security implications. Casey Ellis contributed analysis and explanation of the flaw's risks and technical scope.
Microsoft patches Remote Desktop Protocol hole but danger remains
SC Magazine reported on Microsoft's patch for a Remote Desktop Protocol vulnerability, published on March 16, 2012. The article examines ongoing security risks related to the vulnerability despite the release of the patch.
MS12-020, THE SAGA CONTINUES: EXPLOIT CODE PUBLISHED FOR THE RDP CHINESE WORM LEAKED FROM MICROSOFT?
Security Dojo published a blog post on the MS12-020 RDP vulnerability and the release of exploit code following the flaw's disclosure. Casey Ellis contributed analysis and commentary on the evolving threat landscape surrounding the vulnerability and its exploitation in the wild.
Microsoft confirms MAPP proof-of-concept exploit code leak
A ZDNet security post reports Microsoft's confirmation that proof-of-concept exploit code for a vulnerability was leaked from its Microsoft Active Protections Program. Casey Ellis contributed analysis on the incident and its implications for vulnerability disclosure practices and coordinated security research.
RDP flaw a harbinger of breaches
An ITNews.com.au article from March 2012 examines a recently discovered Remote Desktop Protocol flaw and its implications for future security incidents. Casey Ellis discusses how the vulnerability signals broader risks in widely deployed systems and the need for organizations to strengthen their breach prevention strategies.
MS12-020: this is not good
Dynamoo's Blog published a post on March 13, 2012 analyzing the MS12-020 Remote Desktop Protocol vulnerability and its exploitation risks. Casey Ellis contributed commentary on the severity and potential impact of the flaw on enterprise systems.
Good idea funding deadline looms
This Sydney Morning Herald press article from January 24, 2012, reports that time is running out for entrepreneurs to submit ideas for Pushstart's first batch of proposals. Casey Ellis, a mentor, advises start-ups to share their ideas freely and not be swayed by Facebook's founders, arguing that execution matters more than the idea.