As explained by the company’s mission: mission is to empower the world to build a safer internet. HackerOne helps organizations find and fix critical vulnerabilities before they can be criminally exploited. “Keeping safer both FileZilla users and FileZilla Pro customers remains our priority,” Galoppini said. “The security issue recently found under the HackerOne’s Community Edition program further validates that our continued commitment is paying off,” said FileZilla Director of Strategy Roberto Galoppini. “By participating in HackerOne’s Community Edition program we have access to a large pool of security researchers, and we value this ongoing collaboration through their platform,” Kosse said. Over the last year the FileZilla project has benefited from its relationship with HackerOne, a San Francisco company that pays expert hackers to find bugs in programs before criminals can exploit them for nefarious purposes. Like all the other issues, once verified it was rapidly addressed.

The latest security issue – found after FileZilla joined the HackerOne Community Edition program – was a crash happening when a FileZilla client was receiving an overly long FTP response. Since then 10 security issues have been reported, validated and promptly resolved. The discovery follows FileZilla’s November decision to keep investing resources to ensure users’ and customers’ security.įileZilla began participating in an EU-funded bug bounty program back in January 2019.

FileZilla bug bounty program identified a vulnerability, quickly fixed by the projectįileZilla®, the cross-platform file access and transfer software application, recently and quickly fixed a security issue raised by a security researcher via FileZilla public bug bounty program.

Is filezilla safe ark