Katie Moussouris
More info
- Affiliation
- @stake, Symantec, Microsoft, HackerOne, Luta Security
- Known for
- Microsoft's bug bounty, Hack the Pentagon, ISO 29147/30111
The hacker who got Microsoft and the Pentagon to pay strangers to find their security holes.
At Microsoft, Moussouris launched the company's first bug bounty programme in 2013, after Redmond had spent years insisting it did not pay for bugs. As chief policy officer at HackerOne she helped shape Hack the Pentagon (2016), the US Department of Defense's first invitation to outside hackers.
She has edited the ISO standards 29147 and 30111 on how vendors receive and handle vulnerability reports, and pushed to keep the Wassenaar Arrangement's export rules from criminalising security research. In 2016 she founded Luta Security, whose message is oddly hard to sell for a bug bounty pioneer: most organisations aren't ready for one.