‘Start small - but start now!’ Inside Orange’s Bug Bounty journey with YesWeHack

Insights and advice from Yann Desevedavy, Orange France’s Bug Bounty Program Manager
Orange might be France’s biggest telco and serve 270 million customers in 26 countries, but it still scaled its Bug Bounty program up gradually from modest beginnings.
Six years later and Orange France’s private program now encompasses multiple mobile applications and thousands of subdomains - and the program continues to evolve with the company’s needs.
We recently discussed Orange’s YesWeHack journey so far with Yann Desevedavy, Bug Bounty Program Manager at Orange France.
Desevedavy shared his insights and experiences of managing the program since 2019, including around the value of continuous, crowdsourced testing and a creative way of leveraging bug reports to educate staff internally.

[@SergejFrank]

I find your approach to staff training quite intriguing. By incorporating real company bugs into the training environment, you are able to increase the acceptance and engagement of the developers, which is a fascinating aspect of your methodology.