Savvies Desk ยท 2026

Bug Bounty Hunting & Responsible Disclosure

A practical discussion on vulnerability research, responsible disclosure and the realities of working within bug bounty programmes.

About the Session

In this session hosted by Savvies Desk, I discuss practical lessons from vulnerability research and responsible disclosure, including what happens between discovering a vulnerability and successfully communicating it to a programme.

Topics Covered

  • Bug bounty hunting and vulnerability research
  • Responsible vulnerability disclosure
  • Writing clear and reproducible vulnerability reports
  • HackerOne Vulnerability Rating Taxonomy (VRT)
  • Understanding Informative, Duplicate and N/A outcomes
  • Common mistakes made during vulnerability reporting
  • Lessons from real-world disclosure experiences

Acknowledgements

Hosted by Savvies Desk, with support from HackerOne and the wider security research community.