In late 2020, ZTE launched a new bug bounty program that encouraged security experts and organizations worldwide to identify potential vulnerabilities in ZTE products and services in exchange for a monetary reward. Since early 2021, the multinational has been actively collaborating with YesWeHack to further enhance the security of its products.
YesWeHack boasts over 30,000 cybersecurity experts—so-called ethical hackers—from more than 170 countries. To promote ZTE's vulnerability reward program, the platform has leveraged the expertise of its members to help comprehensively identify potential vulnerabilities.
To date, ZTE's Product Security Incident Response Team (PSIRT) has received a wealth of valuable information from YesWeHack. The closed-loop management of this information has effectively mitigated potential risks. Therefore, external security testing has played a significant role in enhancing the security of ZTE products.
