YesWeHack is delighted to unveil a new-and-improved User Experience (UX) that better aligns with users’ workflows and the platform’s fast-evolving capabilities.

Launched today, the redesign reconfigures the layout and gives important elements greater salience in ways that will help customers and hunters track metrics and take actions more efficiently.

The revamp has, for instance, removed friction from sorting, filtering, tracking and commenting on findings or vulnerabilities. For hunters, meanwhile, there’s a 

 facelift, while it’s now easier to find 

The more intuitive and attractive interface builds on design changes introduced with the launch last year of YesWeHack’s 

 (ASM) product. The latest overhaul further simplifies the handling of assets, findings and reports, however numerous.

Vulnerability reports more aligned with workflows

Making it easier to view and take actions, changes to the vulnerability report page (see image below) should produce a more seamless remediation process.

Crucially, BUG DESCRIPTION, COMMENTS and ACTIONS tabs are now always visible near the top of the page; previously users may have had to click or scroll down the page to reach them. Moreover, some dropdowns have been replaced with tabs for even quicker access.

Report details like scope, affected endpoints and patch status have been moved to a more logical position beneath the CVSS and asset value metrics on the right-hand side. By clicking on a new ‘workflow’ link, users can see a visualisation of the workflow for processing vulnerability reports.

The filtering menu on the VULNERABILITY CENTER and ATTACK SURFACE modules is much more compact – elevating the list of findings and reducing the need for scrolling. Notice also how the headline metrics are more conspicuous thanks to a simple dash of colour.

The revamped programs list makes choosing your next hacking engagement a quicker, more informed process with a multi-column layout, enhanced colour coordination and addition of useful program details (namely: country, sector, number of reports and 1st response).

As for the program page itself, a new HTML anchor menu means hunters can save time by navigating with a single click to the most relevant sections.

RANKINGS refresh adds Olympic-style podium

An eye-catching new podium design gives due prominence to the achievements of the top three performing Bug Bounty hunters (whether of all-time, during the current month/quarter/year or of previous quarters/years).

Gilles Yonnet, CTO at YesWeHack, says: “Our design refresh enhances the user experience, whether you’re a hunter or Bug Bounty Program manager, and whether you oversee just a Bug Bounty Program or combine it with ASM, 

 and a Vulnerability Disclosure Policy (VDP).

“The revamp should facilitate the vulnerability remediation process to the benefit of hunters and organisations alike, and enhance the platform’s utility as a 360-degree cockpit combining unified vulnerability management with continuous threat exposure management.”

A raft of new features will be launched throughout 2024.

 that gives hunters more granularity in finding suitable hunting opportunities. Search filters will include scope types, reward grids, program type, collaboration allowed/not allowed, supported languages, countries and activity areas (sectors).

 feature, this functionality is being introduced in response to hunter demand.

YesWeHack unveils workflow-friendly revamp of user interface

YesWeHack is proud to reveal we are now CREST-accredited for penetration testing services delivered in Asia and EMEA (Europe, Middle East and Africa).

This means our penetration testing services are compliant with stringent, internationally recognised requirements – giving customers strong assurance regarding our technical expertise, competence and professional values.

To become a member of CREST, YesWeHack had to undergo a rigorous accreditation processes covering the policies, processes and competencies involved in delivering pentest-related services.

Membership criteria covers four key areas: operating procedures and standards, personnel security and development, approach to testing and response, and data security.

Among other things, CREST scrutinised our information security certifications, quality management system, contract management, insurance policies, compliance with relevant legislation and our complaint-handling process. YesWeHack provided references from existing customers as part of the process.

The CREST seal of approval gives customers peace of mind about our competence and adherence to the highest professional and ethical standards. Using CREST-accredited providers can sometimes even be a prerequisite to securing commercial contracts, or at least offer a competitive advantage.

These advantages apply regardless of which regions your organisation operates in, since CREST accreditation is recognised and valued around the world.

CREST continually reviews and refines its assessment methods and criteria to reflect evolving threats, technology and best practices, while YesWeHack must demonstrate compliance annually through the membership renewal process.

listed with over 300 CREST-accredited providers

announcement that our Information Security Management System (ISMS) is now officially compliant with ISO/IEC 27017

 – a globally recognised standard for cloud security controls.

Miguel Ania Asenjo, chief information security officer (CISO) at YesWeHack, comments: “CREST membership is a global gold standard within the cybersecurity industry. Together with our latest ISO certification, YesWeHack’s new status as a CREST-accredited provider of pentest services gives customers strong assurance of our ongoing efforts to achieve the highest possible standards of technical competence, data security and professional values.”

“CREST is delighted to welcome YesWeHack as an accredited member company for its penetration testing services,” said Rowland Johnson, president of CREST. “This accreditation provides customers with valuable assurance that the company constantly delivers the highest security services standards.”

 is an international, not-for-profit accreditation and certification body representing the technical information security industry. Founded in the UK in 2006, it now has regional chapters covering the Americas, Asia, Australasia and EMEA.

Centred on four values – capability, capacity, consistency, collaboration – it provides certifications to both organisations and cybersecurity professionals, and engages with governments, regulators and cybersecurity companies worldwide to drive higher industry standards.

 page to find out more about how we strengthen our security and data privacy posture. This includes, among other things, our commitments to GDPR-compliance, state-of-the-art encryption, a secure-by-design model, a zero-trust network and maintaining our 

YesWeHack announces CREST accreditation for pentesting services

What ISO/IEC 27017 certification means for our customers

How we demonstrated compliance

More reasons to trust YesWeHack

YesWeHack secures ISO/IEC 27017 certification to boost trust in our cloud-based services

Duration

Challenges and Points System

Challenge Announcements

Submission of Responses

News

YesWeHack unveils workflow-friendly revamp of user interface

YesWeHack announces CREST accreditation for pentesting services

YesWeHack secures ISO/IEC 27017 certification to boost trust in our cloud-based services

Introducing the YesWeHack Advent Calendar: 24 Days of Challenges and Festive Fun!

Busting Bug Bounty misconceptions

How Bug Bounty and Attack Surface Management can help you comply with the Digital Operational Resilience Act’s upcoming requirements

Introducing the YesWeHack Advent Calendar: 24 Days of Challenges and Festive Fun!

Continuous Threat Exposure Management: Unify your Offsec Strategy with YesWeHack

LeHACK recap: hunters push boundaries at YesWeHack Live Bug Bounty with Red Cross and Les Mousquetaires

How compliance will increasingly drive adoption of Bug Bounty Programs – YesWeHack at Stockholm cyber-defense event

Continuous Threat Exposure Management: Unify your Offsec Strategy with YesWeHack

YesWeHack integrates the prestigious French Tech 2030 program

Raising Awareness Among Development Teams: Hack Day with Scania and YesWeHack in Stockholm

Telenor Sweden uses ethical hackers to dial-up cybersecurity to the max

YesWeHack integrates the prestigious French Tech 2030 program

Products

Researchers

Resources

Company

Follow us