TechPrufer
Get started
Grab
Grab logoGrab · Feature trail

Bug Bounty Program Evolution

1 post · Nov 2025

What this trail covers

Grab's Bug Bounty Program has evolved over 10 years from a private initiative to a global community, expanding its scope to include financial services and AI systems, introducing dedicated mobile security bounties, and experimenting with diverse reward methods. The program actively engages with researchers through live hacking events and exclusive club campaigns, fostering a collaborative defense network. This evolution is supported by dedicated internal cybersecurity teams and a focus on researcher-centric approaches.

All Grab trails
  1. A Decade of Defense: Celebrating Grab's 10th Year Bug Bounty ProgramThis post details the 10-year evolution of Grab's Bug Bounty Program, highlighting its expansion in scope (financial services, AI systems), the introduction of a dedicated mobile security bounty table, and experimentation with reward methods. It emphasizes the program's global engagement through live hacking events (ThreatCon, DEFCON) and exclusive anniversary campaigns with regional HackerOne clubs (Germany, Morocco, India). The post also touches on the shift in reported vulnerability types and the importance of internal cybersecurity teams in maintaining researcher trust and program success.