SUBARU Adopts IssueHunt's Vulnerability Reporting Tool ― Strengthening Security for the Connected Car Era and Enhancing Reliability through External Expertise ―

SUBARU x IssueHunt Implementation Case Study

IssueHunt, Inc. (Headquarters: Chuo-ku, Tokyo; CEO: Kazumasa Yokomizo), a provider of bug bounty platforms and other security solutions, announced on January 19 that SUBARU Corporation (Headquarters: Shibuya-ku, Tokyo; President and CEO: Atsushi Osaki) has adopted "IssueHunt VDP," a tool provided by the company for establishing vulnerability reporting channels.

In recent years, with the spread of connected cars increasing the risk of cyberattacks, the automotive industry has faced a growing demand for advanced security measures. This implementation is a response to this evolving background.

■ Leveraging External Expertise for a More Robust Security System

In addition to conventional internal monitoring and vulnerability assessments, SUBARU decided to implement IssueHunt VDP to build a more comprehensive security framework by utilizing external expertise.

Furthermore, with global regulations increasingly moving toward making vulnerability reporting channels a mandatory requirement, this initiative is also positioned as part of their infrastructure development to respond flexibly and swiftly to these standards.

■ Deciding Factors: Japanese Language Support and a Phased Approach

Key reasons cited for the selection included the Japanese language support, which ensures ease of use for staff, and the ability to prevent misunderstandings and delays in correspondence with reporters. Additionally, the ability to take a phased approach—with an eye toward potentially introducing a bug bounty (reward program) in the future—was highly evaluated.

IssueHunt states that it will continue to promote initiatives that "create markets and precedents" to address security challenges in the manufacturing sector and various other industries.

■ About the ICT Startup League
This support program was launched in fiscal year 2023, initiated by the Ministry of Internal Affairs and Communications' "Startup Creation-type Germination Research and Development Support Business."
The ICT Startup League supports startups through four main pillars:
① R&D Funding / Hands-on Support
Up to 20 million yen in R&D funding is provided in the form of a grant. Additionally, regarding hands-on support, the evaluation committee members involved in the selection process stay close to the startups after selection to foster growth. For companies highly rated by the committee (those they "absolutely want to adopt"), a dedicated, advocacy-style support system is built where committee members personally provide continuous assistance, such as advice on business plans and offering growth opportunities.
② Discovery & Incubation
We provide opportunities for learning and networking to promote the business growth of league members.
We also expand the base by discovering those who aim to start businesses in the future.
③ Competition & Co-creation
Designed as a positive competitive environment akin to a sports league, startups learn together and compete to win the necessary funding (up to 20 million yen). It also provides a place for co-creation where league members collaborate to expand their businesses through various opportunities, such as sessions with evaluation committee members.
④ Dissemination
We disseminate the initiatives of league members in collaboration with the media! By letting more people know about these businesses, we aim to expand opportunities for new matching and future chances.

Column COLUMN

SUBARU Adopts IssueHunt's Vulnerability Reporting Tool ― Strengthening Security for the Connected Car Era and Enhancing Reliability through External Expertise ―

■ Leveraging External Expertise for a More Robust Security System

■ Deciding Factors: Japanese Language Support and a Phased Approach

Other Columns

Column
COLUMN