Southeast Asia eCommerce platform Lazada launches public bug bounty program with YesWeHack

SINGAPORE - Media OutReach - 10 June 2021 - Southeast Asia's leading eCommerce platform Lazada announces the launch of a public bug bounty program with YesWeHack, after running a successful 18 month-long private program. Since January 2020, Lazada has worked with over one hundred ethical hackers to surface vulnerabilities, and has awarded over US$150,000 in bounties to security researchers as part of a private bug bounty program.

Southeast Asia eCommerce platform Lazada launches public bug bounty program with YesWeHack (Copyright YesWeHack)

Kevin Gallerin, Managing Director APAC at YesWeHack (Copyright YesWeHack)

Lazada is now taking additional steps in providing transparency and security to its customers, by transferring the areas previously tested in the private program to a public program. This allows cybersecurity researchers from all over the world to participate in the program and report vulnerabilities to the eCommerce platform.

Protecting customer data is a top priority

With the launch of this public Bug Bounty program, Lazada is making a statement to the eCommerce industry, and highlighting the priority it places on security and transparency for its customers and partners.

"By launching this latest public bug bounty program, we are sending a clear message to everyone, that we value the importance of data in our possession. We believe in the expertise of the YesWeHack community and are excited to continue to work with ethical hackers in identifying new attack methods and countering them. This is about protecting our data, protecting our employees and protecting our customers against vulnerabilities," says Franck Vervial, Head of Cyberdefence at Lazada.

Furthermore, special attention will be paid to vulnerabilities that affect personal data and have severity levels of "high" or "critical." For submitted reports on critical vulnerabilities, Lazada will pay out up to US$10,000 to security researchers.

More information of the public bounty program can be found here.

#YesWeHack