yitit
Home
/
Computing
/
Yelp is offering ‘nice’ hackers up to $15,000 to squash its bugs
Yelp is offering ‘nice’ hackers up to $15,000 to squash its bugs-April 2024
Apr 25, 2025 10:40 PM

  Image used with permission by copyright holderWhite-hat hackers take note – another money-making opportunity has just landed.

  Review site Yelp has, perhaps not before time, announced a public bug bounty program with a top payout of $15,000.

  Recommended Videos

  Security experts have been invited by Yelp to dig into its range of desktop and mobile sites to uncover weaknesses and flaws that could allow nefarious types to wreak havoc on its vast online business.

  Related

  Hackers now exploit new vulnerabilities in just 15 minutes Intel enlists help of ‘elite hackers’ to exterminate bugs Sony’s revamped PlayStation bug bounty program offers cash rewards

  Yelp guarantees a minimum payout of $100 for every accepted report, though should you uncover the kind of critical flaw that would ordinarily cause a serious-minded developer to break into a cold sweat at the mere thought of its existence, you could be in line for the top cash award of $15,000. Or something close to it.

  The online review giant is running its bug bounty program with HackerOne, a Silicon Valley firm that offers such services. A webpage dedicated to the Yelp program offers updates on payouts, and a quick look shows that in less than 24 hours two hackers have already picked up $100 each for their efforts.

  This latest bug-squashing venture is actually an expansion of a private bug bounty program that Yelp launched two years ago. That one helped the company identify and fix more than 100 potential vulnerabilities, but it hopes that taking the program public will help it quickly close down any remaining weaknesses lurking in the depths of its online services.

  Aware of the mind-blowing talent of some researchers, Yelp is asking bug hunters to “please be nice to us.” On its HackerOne page, the San Francisco-based company says, “We want you to bring out your big guns, but hold off on actually breaking anything. Please avoid DDoS’ing us or breaking our systems and services while you are testing.”

  Yelp has posted an additional article laying out exactly what it wants security researchers to look for, so if you enjoy tinkering under the hood and are up for a challenge, go check it out.

Comments
Welcome to yitit comments! Please keep conversations courteous and on-topic. To fosterproductive and respectful conversations, you may see comments from our Community Managers.
Sign up to post
Sort by
Login to display more comments
Computing
Recent News
Copyright 2023-2025 - www.yitit.com All Rights Reserved