Sovcombank Offers Rewards of Up to 120,000 Rubles for Finding Vulnerabilities
Sovcombank has launched a vulnerability disclosure program on the BI.ZONE Bug Bounty platform. Independent security researchers will test more than 40 of the bank’s digital assets.
Bug hunters will be able to examine the organization’s web services, mobile apps, and other digital assets. Rewards are available for findings including remote code execution, SQL injection, cross-site scripting, and business logic flaws. Payouts depend on the severity of the vulnerability, with a maximum reward of 120,000 rubles.
Sovcombank ranks among Russia’s 10 largest banks by assets and serves 10 million active retail customers and 300,000 businesses. The bank continues to strengthen the security of its services.
“Security across our digital services is one of our top priorities. Launching the program on BI.ZONE Bug Bounty adds to the bank’s existing security processes. Independent researchers will help us look at our digital assets from a fresh perspective and identify potential vulnerabilities,” said Andrey Kuznetsov, deputy chairman of Sovcombank’s management board.
