Case Study: Veepee strengthens cybersecurity with Bug Bounty and VDP from Yogosha

Veepee patches 321 vulnerabilities with Yogosha

Veepee, a major European e-commerce player with an annual turnover of €3.3 billion, faced the challenge of securing its vast and constantly evolving digital attack surface. Traditional penetration tests were insufficient as they were not continuous and failed to simulate real-world attacks. To transition to a continuous security strategy, Veepee partnered with Yogosha to implement a Private Bug Bounty program and a Vulnerability Disclosure Program (VDP).

The solution from Yogosha provided continuous 24/7 testing by a skilled community of researchers, covering domains, APIs, and B2B applications. This approach yielded significant results: since 2020, Veepee has patched 321 vulnerabilities, including several critical ones that were likely missed by other tools. The program was cost-efficient, paying over €100,000 in rewards, and optimized the company's DevSecOps workflow by integrating retesting.

Veepee