Hack Glasgow 2025: Lennaert Oudshoorn

Bug bounty basics

Intigriti Head of Triage Lennaert Oudshoorn explains bug bounty as paid vulnerability disclosure across web, mobile, hardware, and more—usually a side hustle, not a quick path to millions. Motivations include learning, community, and career stories like hunters hired after platform success.

Hunting styles

Hunt wide via OSINT, certificate transparency, and automation to find forgotten assets (admin panels, S3 buckets, subdomain takeovers). Hunt deep on one app for logic bugs and IDORs—lower volume but higher impact and fewer duplicates. Mix both approaches.

Programs and reports

Beginners should avoid hyper-competitive programs like Google; try newer scope, lower bounties, or VDPs. Read rules of engagement for legal safe harbor. Good reports need clear titles, realistic severity, reproducible steps—not open-port scans. Triage teams want valid bugs, not rejections.