As announced by MEP Julia Reda at the end of 2018, and by the European Commission, intigriti and Deloitte are happy to announce that the most exciting cyber security challenge in Europe is about to start. As part of the EU FOSSA 2 project, managed by the European Commission, intigriti and Deloitte will run a series of bug bounties for making FOSS more secure. The bug bounties cover the following software:
Open to all
For invited participants only
These bug bounties are open for participation for member of the security and/or FOSS developer community that wants to make FOSS more secure. Indeed, amongst other objectives, these bug bounties aim to encourage a greater focus on security within the FOSS community.
These bug bounties are part of a broader effort from the European Commission to engage with the FOSS community and increase the general visibility of open source software used by the European institutions.
Starting today, KeePass is the first in the line of FOSSA bug bounty programs which run through 2019. Create an intigriti account to get informed of future program launches.
For more details visit https://joinup.ec.europa.eu/collection/eu-fossa-2.
You may also like
October 22, 2026
Understanding PHP2Shell: Everything you need to know about CVE-2026-109618 & CVE-2026-109619
PHP remains one of the most widely deployed server-side languages on the web. Estimates suggest it powers close to 70% of all websites, from small personal blogs to large-scale government services, banking platforms, and e-commerce applications. With such huge presence, any vulnerability in PHP's co
September 29, 2026
10 years of Intigriti
In the summer of 2026, Intigriti celebrated a major milestone: its 10th anniversary! To mark the occasion, the team came together from around the globe. This article shares what they had to say about a decade of Intigriti! Intigriti’s journey shows how a bold idea evolved into a global cybersecurity
September 1, 2026
Reconnaissance unleashed: Meet CrowdRecon
At Intigriti, we have been exploring a simple but important shift in security: the work that happens before a vulnerability report is often where the real signal begins. As vulnerability discovery accelerates, organizations need practical ways to identify and reduce risk before vulnerabilities are u