Sovcombank Launches Bug Bounty Program Offering Up to 120,000 Rubles for Vulnerabilities

• •Sovcombank's bug bounty program offers up to 120,000 rubles for critical vulnerabilities.
• •The program is hosted on the BI.ZONE platform and covers over 40 bank resources.
• •Strict rules are in place to govern testing methods and ensure security.

Sovcombank has initiated a bug bounty program on the BI.ZONE platform, inviting independent security researchers to identify vulnerabilities across over 40 of its resources, including web services and mobile applications. The maximum reward for critical vulnerabilities like remote code execution and SQL injections is set at 120,000 rubles, while lower payouts are available for less severe issues. So far, 70 reports have been submitted, with 19 accepted and a total of 477,500 rubles paid out. The program aims to enhance the bank's security measures and is part of a broader trend among Russian financial institutions to adopt bug bounty initiatives. Sovcombank serves 10 million retail clients and 300,000 companies, making the security of its systems crucial. The rules for participation are strict, prohibiting certain testing methods to ensure the integrity of the program.