I noticed there is no tag for bug bounty programs. Does it make sense to establish a tag like [bug-bounty] that covers questions about vulnerability reward programs (like the one Google runs) and bug hunting on platforms like HackerOne or Bugcrowd?
I am tempted to create a category for questions like these:
I agree it could be a useful tag, but we need to make sure it is used in the right way. There is a high risk that it gets the same problem as the penetration test tag - it is used for question about anything, that just happend to arise while the poster was working on a bug bounty.
To combat that we need good and clear usage guidance, preferably that explicitly explains how to use the tag and not just what the words mean. Maybe something like this (just a suggestion, I am sure it can be improved):
Use for question about the design and workings of bug bounty programs. Do not use for questions about bugs in general, or for questions that is not explicitly about the program itself.
But still, in my humble opinion it would be a useful tag, so I say create it!
bug-bounty tag was established, it would attract a lot of users who are to ask specifically about how to write a report, why they rejected their bug's & couple more off-topic which isn't related to core penetration testing or information security as a whole. How does one deal with that?
– Shritam Bhowmick
Dec 15 '16 at 10:19
