A Decade of Defense: Celebrating Grab's 10th Year Bug Bounty Program

This post details the 10-year evolution of Grab's Bug Bounty Program, highlighting its expansion in scope (financial services, AI systems), the introduction of a dedicated mobile security bounty table, and experimentation with reward methods. It emphasizes the program's global engagement through live hacking events (ThreatCon, DEFCON) and exclusive anniversary campaigns with regional HackerOne clubs (Germany, Morocco, India). The post also touches on the shift in reported vulnerability types and the importance of internal cybersecurity teams in maintaining researcher trust and program success.