The independent security research and bug bounty culture have gained a lot of traction over the last few years. There now exist dedicated platforms like HackerOne and bugcrowd for secure vulnerability disclosure and subsequent payouts for bug hunters. In order to get paid for a discovered vulnerability, a hacker needs to first demonstrate a Proof of Concept, usually in the form of a working exploit.
One major flaw with this model is that it requires the independent hacker to expose his exploit in order to even begin discussions on a bounty, thus effectively losing their leverage in the negotiation. PwnHub is a dynamic, scalable, PaaS with secure blockchain based payment gateways aimed at providing individuals a way to host their exploits and allow corporates to interact with them using mutually agreed-upon test scripts, without revealing the actual exploit.
Even though our platform does provide an in-built negotiation as well as payment gateway functionality and can, in theory, function as an independent vulnerability disclosure platform, it is in no way meant to compete with existing solutions like HackerOne or bugcrowd but rather complement them by providing bug hunters an alternative means of demonstrating their PoCs without exposing any vital info as they proceed with negotiations.
Our project is based on microservices architecture and it is very difficult to integrate them. Also, we can not test this in actual blockchain due to lack of funds.
Discussion