IssueHunt Co., Ltd. IssueHunt Co., Ltd., which provides the bug bounty platform “IssueHunt”, has decided t o hold the second round of closed community events related to product security.

IssueHunt Co., Ltd.
IssueHunt Inc., which provides the bug bounty platform “IssueHunt”, etc., has decided to hold the second closed community event related to product security.
……
IssueHunt Co., Ltd. (Headquarters: 1-8-1 Nihonbashi Kayabacho, Chuo-ku, Tokyo, Representative Director: Kazumasa Yokomizo), which provides the bug bounty platform “IssueHunt ( https://issuehunt.jp/

),” is a product “IssueHunt Lounge” is held irregularly as a closed community event related to security.
This time, we will be holding the “Vulnerability Management
Roundtable” for the second time.
We plan to invite companies that already have knowledge of
vulnerability management to talk about their actual initiatives. If you are a company interested in strengthening your security measures, please apply.
(Click here for the minutes of the previous event “Product Security Launch Roundtable”)
https://issuehunt.jp/articles/lounge1report
[Image 1

Overview (IssueHunt Lounge#2 Vulnerability Management Roundtable) This is a closed community event related to product security that IssueHunt holds irregularly.
This time, we will hold a “Vulnerability Management Roundtable” with the theme of “Vulnerability Management.”
“There are mechanisms to detect vulnerabilities, but they cannot handle the large number of alerts.”
“I want to know how to effectively manage vulnerability information related to my products.”
“I would like to know examples of PSIRT operations.”
We will hold a roundtable discussion to discuss concerns and know-how that are difficult to express, and to create connections across product security.
We will provide light snacks and drinks, so please feel free to come by. https://issuehunt.jp/seminar/lounge2
detail
Date and time etc.
[Image 2

·time schedule
[Image 3

subject
・We have introduced a vulnerability scanner, but it is not
operational/We are having trouble processing a large number of alerts/We are taking some measures to address the issues listed on the left.
・I would like to refer to the efforts of other companies regarding vulnerability management methods.
・Have established/currently works at a PSIRT or product security specialist organization and can share knowledge
・I am worried about where to start with product security/I feel that existing measures such as regular vulnerability diagnosis are insufficient or have a problem.
・I want to gain knowledge of cutting-edge security measures such as DevSecOps and shift left/I can share knowledge
Other matters
The content of the day will be published in accordance with the Chatham House Rules, so that the individual or organization of the speaker will not be identified.
Please note that no photographs will be taken.
Example: https://issuehunt.jp/articles/lounge1report
Other announcements (free consultation session for a limited time only) DevSecOps is an approach that integrates the development (Dev), security (Sec), and operation (Ops) phases and incorporates security measures from the early stages of development. This approach allows us to maintain release velocity while increasing the security of our products. At this consultation session, we will provide professional advice to resolve questions and issues related to the implementation and practice of DevSecOps, including the benefits of implementation and introduction of specific tools. Please feel free to submit a new application.
https://issuehunt.jp/devsecops
[Image 4