Skip to main content

Security - Code Review/Bug Bounty

I’d like to see more rigor regarding security. I love the frequent release cadence but it makes me nervous to deploy G in high-security environments.

I feel like a series of external code reviews and a bug bounty program would go a long way in making sure the codebase is being challenged in a constructive way as the product grows.

1 comment

Log in to comment and vote

Comments1

  • Amaranth Cherry

    +1 to a bug bounty program and continuous code review. In the latest SOC 2 post, Mikel mentioned they had a satisfactory pen test. Here is an example bug bounty program by Porkbun that I consider very straightforward.