Twilios Bug Bounty Program: Celebrating 10 years of Bug Bounty

Twilio has grown a lot in the past five years, including our Bug Bounty program. We have benefited from partnering closely with talented researchers from around the world, who have built a community to help protect Twilio and our customers.This year, we bring you an updated brief to better serve our researchers, customers, and Twilions!

We've had a Bug Bounty for ten years and have learned quite a bit about running a good program. We're excited to highlight our progress and share some of our Bug Bounty statistics from the last decade.

Some highlights to call out:

To celebrate our 10 year achievement, we want to share some numbers:

Additionally, we just launched Twilios new Vulnerability Disclosure program at https://www.twilio.com/en-us/security/vulnerability-disclosure-program . Our Vulnerability Disclosure Program is open to allwhether you're a customer, professional security researcher (who does not meet the Bug Bounty Program requirements), or someone who has discovered a potential issue. While this program doesn't offer monetary rewards, your contribution is invaluable to us.

Thank you to all the researchers who have collaborated with us to improve Twilios security. We appreciate your dedication and patience as we continue to make improvements to our program. Your hard work has not gone unnoticed, and we hope to continue to grow our partnership in the future.

Special thanks to our top 3 researchers through the years:

https://bugcrowd.com/danieloizo

https://bugcrowd.com/m0chan

https://bugcrowd.com/miky

As we continue to mature through 2025, keep an eye on our program for additional updates. Well continue our own improvements internally by reducing triage time and increasing internal education opportunities.

Read more from the original source:
Twilios Bug Bounty Program: Celebrating 10 years of Bug Bounty