AppSec Logic Master on OpenBugBounty

2 days back while viewing my profile after I submitted RXSS vulnerability to a university, I observed this ….

For 1 year, none of my valid reports were patched by organizations because OpenBugBounty serves as an intermediatory for coordinated disclosure between the researcher and any organization/institutions/website owners. Then it’s the website owner’s choice when they patch it because I observed many are developing their website using 3rd party web development agencies, where the developer has no knowledge of secure coding or even basic sanitization of user input practices.

AppSec Logic Master 🛡️