2021: Smashing bugs and dropping names

What this post added

This post details GitLab's bug bounty program in 2021, highlighting metrics such as 752 reports, $280K USD in bounties awarded, and 189 resolved reports. It announces the move to a managed program on HackerOne, which shifted initial triage and reproduction responsibilities. Bounties were increased across all ranges. The post also discusses the GitLab Bug Bounty Council process, the use of CVSS scores and a CVSS calculator for transparency, and provides tips for hackers through various content formats. It mentions contest winners for reputation points, best written report, most innovative report, and most impactful finding, with details to be released later. Future plans include cleaning up the security backlog and potentially increasing program scope.