Innostage Bug Bounty

Main article: Bughunters. Bug bounty. Vulnerability scanning

2023: Bug bounty launch

Innostage announced on September 22, 2023 that it would check the level of protection of its own information infrastructure using the bug bounty program. The Innostage program will be aimed at implementing unacceptable events: thus, the company plans to publicly demonstrate the level of practical expertise in IT and information security areas and the safety of work for its customers.

Innostage applies the concept of cyber resilience, which consists primarily in synchronizing IT and information security experts when creating a sustainable and business-efficient IT infrastructure. The company's goal is to show business that the well-coordinated and joint work of IT and information security divisions will allow top managers of companies not to worry about security, fault tolerance, import substitution and other routine tasks. At the same time, for IT and information security specialists, the infrastructure should have the functions of automating typical tasks, monitoring 360, controlling changes and other operational tasks that allow you to close any business requests.

Innostage for September 2023 will become the second company from the Russian information security industry with its own bug bounty program in terms of unacceptable events: in November 2022, Positive Technologies announced a similar program.

Bug bounty programs are implemented by companies that adhere to modern approaches to product development and organization of information infrastructure protection. They allow organizations in real conditions to check its security and take measures that will exclude the possibility of the implementation of unacceptable events.

Russian baghunters ("white hackers") will be able to take part in the program. The launch is scheduled in private mode (by invitation), followed by transfer to an open bounty program. If the attacks are successfully implemented, white hackers will receive a monetary reward from the company.

For us, the bug bounty program is one of the real measurements of our own security. One of Innostage's main visionary tasks is to change the attitude of the industry towards such tools. Innostage begins preparing the program, and plans to conduct it as publicly as possible - because we ourselves share the idea of ​ ​ real cybersecurity, which requires not only the implementation of regulatory practices, but also constant self-testing. We are confident in the security of our own infrastructure and are doing everything to ensure that this confidence is always maintained, "said Aydar Guzairov, CEO of Innostage.

Preparation of a description of the program and conditions for a public bug bounty began in September 2023. The program is scheduled to launch in May 2024.