LG Uplus announced on Monday that it is launching a global bug bounty program in collaboration with HackerOne, the world’s largest bug bounty platform.
This initiative aims to proactively identify potential vulnerabilities that might be overlooked by domestic security verification systems by tapping into the global white-hat hacker community.
The program will encompass all of LG Uplus’s service areas, including mobile, internet, and enterprise services.
A bug bounty is a system where companies reward ethical hackers for discovering security vulnerabilities in their services and information technology (IT) infrastructure. By simulating real-world conditions, organizations can detect and address security weaknesses early, significantly enhancing their overall security posture.
Since October 2024, LG Uplus has been jointly operating a bug bounty system with the Korea Internet & Security Agency (KISA). Valid vulnerabilities reported by domestic ethical hackers have been swiftly identified and addressed through LG Uplus’s proprietary vulnerability management system and KISA’s cybersecurity vulnerability information portal.
HackerOne, LG Uplus’s new partner, is the world’s largest bug bounty platform, boasting a community of over 2.4 million ethical hackers.
The platform has established long-standing partnerships with numerous global tech giants and even the U.S. Department of Defense, demonstrating its exceptional vulnerability detection capabilities and robust responses to diverse security scenarios.
The program will operate on an invitation-only basis, allowing participation exclusively from skilled global ethical hackers who have undergone rigorous identity verification and capability assessments.
It will continuously accept reports from these global ethical hackers, enabling rapid threat detection, vulnerability analysis, and improvements. Through this approach, LG Uplus aims to stay ahead of potential security risks.
LG Uplus anticipates that this partnership will help establish a vulnerability management system that aligns with global standards.
Hong Kwan-hee, Chief Information Security Officer at LG Uplus, emphasized that the primary objective is to proactively identify and address vulnerabilities that may have escaped the notice. It’s committed to spearheading the creation of a secure and transparent security ecosystem while fostering a culture of responsible vulnerability management.
Moreover, from November of last year through the first half of this year, LG Uplus has intensified its security vulnerability assessments. The company collaborated with offensive security firm ENKI WhiteHat to conduct comprehensive black box penetration testing across its entire service portfolio.