PR95432

TORTOLA, British Virgin Islands, April 12, 2022 /PRNewswire=KYODO JBN/ --

- This is one of the highest bounties ever offered on Bugcrowd and 10x the

highest reward previously offered by ExpressVPN

    - ExpressVPN invites researchers to focus test its TrustedServer technology

    - TrustedServer is the world's most advanced VPN server technology that has

been providing essential privacy protections for ExpressVPN users since 2019

    Leading consumer privacy and security company ExpressVPN is offering

US$100,000 via Bugcrowd's Bug Bounty solution to researchers who can find and

demonstrate a critical security bug on ExpressVPN's in-house technology,

TrustedServer.

    It is the highest single bounty offered on the Bugcrowd platform and 10

times higher than the top reward previously offered by ExpressVPN, showcasing

the company's commitment to providing essential privacy protections to its

users.

    Nick McKenzie, Chief Information & Security Officer, Bugcrowd, says, "We're

uber excited to see a leader in the online privacy and security world stepping

up collaborating with our community of cyber researchers, to ultimately work

together to ensure a safe online experience for everyone. ExpressVPN's ongoing

partnership with Bugcrowd since 2020 demonstrates its commitment to a strong

security posture and a constant drive to improve the security of its products

and services. We hope this incentivizes more researchers to join the crowd, and

be a part of finding solutions to secure the digitally connected world."

    ExpressVPN built TrustedServer technology to significantly minimize

problems that traditional server management pose. On top of having an

independent audit by PwC to confirm TrustedServer's security-enhancing claims,

ExpressVPN is taking a further step by rewarding the people who help them

improve their security.

    Shaun Smith, Software Engineering Fellow at ExpressVPN and the architect

behind TrustedServer, says, "TrustedServer is already the world's first and

most advanced VPN server technology, and we want to work with the community to

elevate it further. This means using the ingenuity of Bugcrowd's security

researchers to help us further improve the security of TrustedServer. It was

important for us to demonstrate how seriously we take this contribution and are

excited to see what the community comes back with."

    Smith continues, "Traditionally, VPN infrastructure may be vulnerable to

several privacy and security risks. This is because most traditional approaches

to managing server infrastructure cannot account for various security and

privacy risks that are important for VPN service providers to mitigate. We

built TrustedServer to address those risks, and make the same solution

scalable, consistent, and secure across all our servers."

    ExpressVPN is inviting Bugcrowd security researchers to test the following

types of security issues within its VPN servers:

    - unauthorized access to a VPN server or remote code execution

    - vulnerabilities in ExpressVPN's VPN server that result in leaking the

real IP addresses of clients or the ability to monitor user traffic

    To find out more and participate in the bug bounty head to

https://www.expressvpn.com/blog/bug-bounty-bonus-vpn-server-vulnerabilities/

    Press Contact:

ExpressVPN Press Team

press@expressvpn.com

    About ExpressVPN

    Founded in 2009, ExpressVPN is one of the world's largest providers of VPN

services, enabling users to protect their privacy and security online with just

a few clicks. The company's award-winning software for Windows, Mac, iOS,

Android, Linux, routers, and browsers secures user information and identities

with best-in-class encryption and leak proofing. With servers across 94

countries, ExpressVPN provides a fast connection wherever users are and offers

uncensored access to sites and services from around the world. To learn more

about ExpressVPN's privacy and security solutions, visit expressvpn.com

[http://expressvpn.com/].

Source: ExpressVPN