Drones

Parrot Bug Bounty program with YesWeHack

Parrot has grown into a major power in the commercial drone industry since its inception in the leisure industry: the US-made ANAFI USA created the government-approved Blue SUAS list in the US. The launch of a Parrot Bug Bounty program with YesWeHack now shows that the company values ​​data security on all platforms, an important function for the company.

YesWeHack is the first European crowdsourcing security platform. “Through this partnership, Parrot will benefit from YesWeHack’s large community of cybersecurity researchers to identify potential vulnerabilities in its drones, mobile applications and web services,” the announcement said.

The bug bounty program is carried out in two phases:

  • The private programs will initially provide exclusive access to selected security researchers and include future Parrot drone models. The expertise and diverse skills of the researchers will confirm the high level of security of the products before they are marketed to improve the safety of parrot users and the protection of their data.
  • After an initial phase in a private bug bounty program and after commercialization, the products will be included in a public program. Your security will then be screened by the entire YesWeHack community, which represents more than 22,000 cybersecurity researchers.

According to Parrot, cybersecurity is a priority: it gives users “complete visibility into the security of their data”. A full review by Bishop Fox is posted on his website. This is now a critical issue for all drone manufacturers as drone manufacturing giant DJI has slipped on the industry’s data security defensive after US government agencies raised concerns about Chinese-made technology.

Victor Vuillard, Chief Security Officer and CTO Cybersecurity of the Parrot Group, says: “After the integration of cybersecurity from the first design phase of Parrot drones, the bug bounty started with YesWeHack completes the audits and brings with it an additional control step. In the event of a mistake, the YesWeHack cybersecurity research community will detect it and allow Parrot to correct it before real attackers can abuse it. “

“We are delighted to support Parrot in its commitment to data security for the drone and the user. The richness and diversity of the YesWeHack community provide the range of skills required to cover the full range of perimeters, whether it is hardware or applications. In the public bug bounty phase, which will take place in a second phase, Parrot’s products can be confronted with the expertise of several thousand researchers, thereby increasing transparency regarding cybersecurity. “Says Guillaume Vassault-Houlière, CEO of YesWeHack.

Miriam McNabb is editor-in-chief of DRONELIFE and CEO of JobForDrones, a marketplace for professional drone services, and a fascinating observer of the emerging drone industry and the regulatory environment for drones. Author of over 3,000 articles focusing on the commercial drone space, Miriam is an international speaker and recognized figure in the industry. Miriam graduated from the University of Chicago and has over 20 years experience in high-tech sales and marketing for new technologies.
For advice or writing in the drone industry, email Miriam.

TWITTER: @spaldingbarker

Subscribe to DroneLife here.

Related Articles