The #BugResilienceProgram enhances the resilience of critical, free and open source software infrastructure against vulnerabilities. We’re now accepting applications on an ongoing basis to participate and take advantage of the services offered through the program.

https://www.sovereigntechfund.de/news/join-bug-resilience-program-vulnerability-management-support

#systemd has joined the @sovtechfund #BugResilienceProgram and we now have a security bugs bounty program up and running on #YesWeHack https://yeswehack.com/programs/systemd-bug-bounty-program

Good hunting!

Today, a public bug bounty launched for @sequoiapgp, supported by the #BugResilienceProgram on the @yeswehack platform: https://yeswehack.com/programs/sequoia-pgp-bug-bounty-program

We're funding the discovery of vulnerabilities by researchers, as well as the fixes by FOSS projects.

Learn about the bounty on the Sequoia blog: https://sequoia-pgp.org/blog/2024/04/10/202404-bug-bounty/

The Bug Resilience Program: https://www.sovereigntechfund.de/programs/bug-resilience

We're glad to be working with @ostif for code audits as part of the #BugResilienceProgram https://ostif.org/stf-brp-announcement/

The first two audit reports have been published, links in the thread: