- ARK has just announced the acquisition of security and pentesting services from Bugcrowd
- White hat hackers will be testing the ARK hull to see if its safe from a breach and other risks
- ARK will also have access to Bugcrowd customers and can take full advantage of their private and public programs
ARK is stepping up its security with its newly acquired security and penetration testing services from Bugcrowd. The ARK hull will be tested by professional and trusted white hat hackers from different parts of the globe. Their aim is to breach the hull and expose potential vulnerabilities before they can pose a risk to the ARK Ecosystem.
Stepping up the game on security
ARK is building a vast ecosystem of linked chains as well as a virtual spider web of endless use-cases, making it a highly flexible, adaptable, and scalable platform. On the other hand, Bugcrowd is a crowdsourced security platform. They partner with the most experienced triage teams and the most trusted hackers to generate better results and reduces risk. This allows their clients to release secure products to market faster.
Through the help of Bugcrowd, ARK will have access into a global community of more than 100,000 expert researchers, using different techniques to identify 7 times as many critical issues while being 80% faster as compared to other traditional solutions.
Bugcrowd has a long list of world-class customers including Pinterest, Netflix, Tesla, Dash, Western Union, Binance, Netgear, Atlassian, Invision, Motorola, Hewlitt-Packard, Barracuda Networks, Fiat/Chrysler, Digital Ocean, Motorola, and a whole lot more.
Bugcrowd to comb through the ARK codebase
Besides access to these customers, ARK will also have the advantage of using the full array of Bugcrowd’s services. These services even include both private and public programs. The first program for testing will be the release of ARK v2 Core. This program will start by having a Bugcrowd Security Researcher discover and submit findings to Bugcrowd. It will be checked and tested for validation. Once it’s passed, it will be escalated to the ARK Team for them to review and patch. Critical findings are sent to the ARK team within 24 hours. As a result, the critical bugs will be fixed and patched before they can be found by malicious hackers.
Another great thing about this collaboration is that ARK can use Bugcrowd’s Vulnerability Rating Taxonomy. VRT is a resource that outlines the baseline priority rating of Bugcrowd. To get to this rating, the security engineers from Bugcrowd will begin with generally accepted industry impact. They will also consider the average acceptance rate, average priority, as well as commonly requested program-specific exclusions across all of the programs in Bugcrowd.
The VRT is considered an invaluable resource for bug hunters. It can outline the types of issues that bug bounty programs normally see and accept. It can also help researchers point out which types of bugs they have overlooked. This way, they can provide exploitation information in a report where it might be best needed.