Backblaze Doubles Down on Security With Open Bug Bounty Program

Backblaze, Inc. announced the public opening of its existing Bugcrowd Bug Bounty Program to all security researchers.

The company has invested in maintaining and upgrading its security portfolio – including the recent launch of server-side encryption for its S3 Compatible API for B2 cloud storage and the doubling in size of its security team over the last year under chief information security officer Mark Potter. Leveraging the security expertise of the ethical hacking community through Bugcrowd underscores the company’s commitment to cybersecurity best practices aligned with the constantly evolving threat landscape.

“Backblaze continues to build out a world class Security team and we’re hardening our systems and processes against cybercriminals every day, but no business is entirely immune from vulnerabilities – as the recent Log4j issue made all too clear,” Potter noted. “That’s why we’re excited to broaden our security profile with Bugcrowd – they make it easy to engage and reward security researchers who can identify issues before they become bigger problems.”

Bugcrowd encourages ethical hackers to attack businesses, find vulnerabilities in their software and processes, and aid in guiding the remediation of those vulnerabilities before they can be exploited by anyone else. The firm’s private bug bounty program with Bugcrowd has been running for over a year, but now that the program is public, interested security researcher can sign up to challenge the company’s in-scope products and networks by visiting this website.

“We’re excited about Backblaze’s adoption of a bug bounty solution on the Bugcrowd Security Knowledge Platform and benefit from the power of the human intellect of our global crowd,“ said Ashish Gupta, CEO, Bugcrowd. “Blackblaze joins a visionary group of companies that see continuous, proactive security testing as a critical requirement for keeping customer data, and IT infrastructure overall, safe from attack.“

Resource:
Blog: Calling All Security Researchers: Join the Backblaze Bug Bounty Program