Kaspersky Lab Extends Bug Bounty Program to Password Manager 8

Kaspersky Lab will extend its bug bounty program, to Kaspersky Password Manager 8 and has increased rewards for remote code execution bugs from $2,000 to $5,000, according to a release from the company.

Launched in August 2016, the initial phase of the program helped uncover roughly 20 bugs in its first six months. Initially, researchers were asked to examine Kaspersky Lab’s flagship products for consumers and enterprises, Kaspersky Internet Security 2017 and Kaspersky Endpoint Security 10. Now the company is also adding Kaspersky Password Manager 8

Bug bounty programs are an effective way for security companies to incentivize external researchers to safely find and disclose software vulnerabilities. In addition to other internal measures, bug bounty programs help companies continuously improve their security tools and provide multiple layers of protection for customers.

“The security of our customers is our priority. That is why we take independent research into our products very seriously and apply its results to constantly improve our best-in-class technologies,” said Nikita Shvetsov, chief technology officer at Kaspersky Lab. “Since August, it is fair to say that our Bug Bounty Program has been successful in optimizing our internal and external mitigation measures to continuously improve the resiliency of our products, which is why we’ve decided to extend it. We also appreciate the enthusiastic participation of security researchers worldwide. As a mark of our respect for the work they do in helping us to bolster our solutions, we’ve increased the remuneration on offer in this second phase of the program and extended the scope to include other important Kaspersky Lab products.”