Million Dollar Bounty: HackerOne Secures Contract from the General Services Administration

Million Dollar Bounty: HackerOne Secures Contract from the General Services Administration
By David Penn Posted on
Categories: HackerOne

The white hat hackers of HackerOne have won a $2 million bug bounty contract with the Technology Transformation Service (TTS) of the U.S. General Services Administration.

The firm, which employs ethical hackers to find security vulnerabilities in client websites before the bad guys do, has worked with the TTS for a little over a year now. The new contract extends the partnership, providing a base performance period of six months, with an additional nine option periods lasting six months each for a total of five years.

Marten Mickos, CEO of HackerOne, called the contract “a reminder of the leadership role that the U.S. federal government has taken in vulnerability disclosure.” The GSA in particular has shown a strong interest in using bug bounties – i.e., cash prizes to hackers who discover and report vulnerabilities – and is the first civilian agency to leverage these programs to improve its website security.

“Over the last year, GSA has proved to be one of the fastest government agencies in regards to resolution time,” Mickos said, “resolving vulnerabilities markedly faster than the global average for government bug bounty programs.”

The contract with the GSA comes just over a month after the company announced inking a deal with the U.S. Department of Defense to unleash its squad of white hat hackers on the public-facing websites of the Marine Corps Enterprise Network (MCEN). The Hack the Marine Corps bug bounty challenge in August was the latest iteration of the San Francisco, California-based company’s work with the DoD, having also launched similar campaigns with the Army, the Air Force, and the Defense Travel System over the past two years.

Founded in 2012, HackerOne presented Tapping Hackers to Improve Security at our developers conference, FinDEVr London, last summer. The presentation discussed how external, white hat hackers can help companies uncover cybersecurity flaws, and how they can move toward more comprehensive vulnerability disclosure programs.

Since inception, HackerOne has helped 1,000+ companies and organizations find and fix more than 76,000 cybersecurity vulnerabilities, earning white hat hackers $32 million in bug bounties.

Share this:

Send Post Twitter LinkedIn Facebook

Finovate First-Timer Nordigen Hauls in $800,000 in New Funding

Finovate First-Timer Nordigen Hauls in $800,000 in New Funding
By David Penn Posted on
Categories: Funding, Nordigen

Latvia-based lending start-up Nordigen has received $800,000 funding from Seedcamp and Finnish venture capital firm Inventure, reports Antony Peyton of Fintech Futures (Finovate’s sister publication).

Nordigen said it aims to disrupt credit bureaus (and has a dig at them) and help creditworthy people get access to loans.

“It’s hard to love credit bureaus at the moment. What they do was necessary, but with the rise of open banking, we’re now able to build technologies that are much faster, more reliable and more customer-friendly than traditional credit checks,” said Rolands Mesters, co-founder of Nordigen.

According to the firm, banks across the world reject up to 90% of all loan applications daily. “This is because banks base their decisions on credit history reports from credit bureaus, but not many people have a formal credit history,” Mesters added.

To back up its plans more, the company also cited a World Bank private credit bureau coverage report, which stated that around 30% of the global population have a record at a credit bureau.

Nordigen’s core product allows a lender to verify a customer’s real income and spending habits to make the first assessment of their creditworthiness.

The firm said its “secret sauce” is the ability to identify risk-critical behaviours in customer account data.

With the new funds, Nordigen explained that it will be hiring across the board with a focus on sales and business development. A big part of the investment will also be directed towards entering new markets, such as Brazil, South Africa, the U.S. and U.K.

The start-up was established in 2016 in Riga, Latvia, by two Google Demo Day graduates, Mesters and Roberts Bernans.

The company works with banks and alternative lenders in 12 countries, including the Baltic states, Spain, Finland, Poland, Denmark, Sweden, Germany, Czech Republic, Australia and New Zealand.

Nordigen makes its Finovate debut this week at FinovateFall in New York.

Share this:

Send Post Twitter LinkedIn Facebook

The Final Countdown to FinovateFall

The Final Countdown to FinovateFall
By Julie Muhn (@julieschicktanz) Posted on
Categories: FinovateFall 2018

The kickoff to FinovateFall has almost arrived, and we’re just hours away from the first demo. That can only mean one thing– we’re busy watching companies rehearse each demo they will showcase over the first two days.

If you still don’t have your ticket, register online or pick one up tomorrow morning after 8 am when the registration desk opens. As a reminder, here are all of the details you need to know for FinovateFall this week:

Where

We’re changing this up this year, and FinovateFall will be held at the Marriott Marquis Times Square, 1535 Broadway, New York, NY 10036.

When

The first demo begins at 8:45 am tomorrow but be sure to come early– registration opens at 8:00 am and we’ll have coffee and a continental breakfast for you to enjoy before you take your seat in the auditorium. For a full look at the schedule, here is the agenda.

Who

Over the course of Monday and Tuesday, we’ll host 79 companies on stage as they each show off a live demo of their newest product. Check out our full list of demoing companies and don’t miss our Sneak Peek series that gives you an inside look. On Wednesday, you’ll listen to and interact with industry analysts and experts as they discuss the latest fintech trends. For more information, take a look at our full speaker roster. And if you’re registered for our exclusive Blockchain and AI Summit Day, get ready to hear in-depth analyses about these emerging trends and how they apply to your industry, and how you can implement them into your strategy.

Still have questions? Feel free to reach out to our staff to get some answers. We’re looking forward to seeing you tomorrow!

Share this:

Send Post Twitter LinkedIn Facebook

Finovate Alumni News

By David Penn Posted on
Categories: iSignthis, Mambu, SocietyOne

Around the web

  • Mambu introduces its Mambu Process Orchestrator (MPO), an integration-platform-as-a-service offering to help companies build and manage API- and cloud-based processes.
  • iSignthis teams up with Finland’s biggest cryptocurrency service provider, Prasos.
  • Mozo features SocietyOne in its lineup of 4 Aussie fintechs you need to know about.

This post will be updated throughout the day as news and developments emerge. You can also follow all the alumni news headlines on the Finovate Twitter account.

Share this:

Send Post Twitter LinkedIn Facebook

Onfido to Help Crowdfunding Platform Indiegogo Fight Fraud 

Onfido to Help Crowdfunding Platform Indiegogo Fight Fraud 
By David Penn Posted on
Categories: Onfido

Indiegogo has turned to identity verification specialist Onfido to help keep its crowdfunding platform fraud-free. Onfido’s technology leverages artificial intelligence and machine learning to verify new users when they sign up, making it easy for Indiegogo to quickly onboard new campaigners to its platform.

“Building trust in our community is a top priority at Indiegogo, and Onfido helps us achieve that,” Head of Trust and Safety at Indiegogo Kerry Baker said. “By ensuring we keep fraudsters off our platform, not only can we avoid hefty non-compliance fines, but our users also have more faith that their money is going to the causes and innovations they really believe in.”

Fortunately, adding these fraud protections will not increase friction for users of the Indiegogo platform. Campaigners currently use a selfie and a photo of their identity document as part of the onboarding process. With this newly-announced partnership,  Onfido will check those identity documents for authenticity and match the image on the document to the user’s face.

The growth in crowdfunding has been dramatic, with $4 billion pledged via crowdfunding in 2018 and millions of international users accessing the Indiegogo platform every month. This – and the fear of repetitional risk from fraudulent activity – helped drive the company’s decision to make significant enhancements to secure the platform and keep fraud at a minimum.

“In an online world where we no longer meet face to face, it’s difficult for businesses to know if customers are who they claim to be – and how to create a secure community for their users,” Onfido co-founder and CEO Husayn Kassai said. He added that identity verification is instrumental in helping businesses meet this challenge and that Onfido was “proud to be working with Indiegogo as they build towards fraud-free crowdfunding.”

Onfido demonstrated the Facial Check with Video feature of its identity verification SDK at FinovateEurope 2018. Earlier this month, the company announced that it was working with Volopa to help the international payment solution provider improve the security of its customer onboarding process. This summer alone, Onfido partnered with international remittance firm, TransferGo, teamed up with Claim Technology, and announced that it would help provide identity verification for Zoomcar, India’s largest ride sharing company.

Founded in 2012 and headquartered in London, U.K., Onfido has raised more than $60 million in funding. See the company’s latest technology at FinovateFall in New York next week.

Share this:

Send Post Twitter LinkedIn Facebook

Cortera Raises $10 Million to Enhance Risk Scoring

Cortera Raises $10 Million to Enhance Risk Scoring
By Julie Muhn (@julieschicktanz) Posted on
Categories: Cortera, Funding

B2B credit scoring company Cortera landed $10 million in funding this week, bringing its total capital raised to just over $578 million in combined debt and equity. Investing in the Florida-based company are Hearst’s Fitch Group Financial Venture Fund, who led the round, as well as existing investors Volition Capital, Battery Ventures, Allen & Company, and Tomorrow Ventures.

“We are passionate about fueling profitable business growth in the U.S.,” Cortera CEO Jim Swift said. “For too long, the flow of capital has been hamstrung by the need for more complete and timely insights into private companies. It is exciting to be at a point of network coverage where businesses now have a powerful alternative to traditional sources.”

Founded in 1993, Cortera gathers insights on the purchase and payment behavior of more than 20 million public and private U.S. businesses. The company leverages this data to create analytics such as new customer risk assessments, customer portfolio risk monitoring, supplier risk management, customer segmentation, insurance underwriting, customer profitability modeling, and loan-default prediction. Essentially, the data help businesses make decisions about their customers, prospects, and suppliers, and minimize risk.

Hearst’s Fitch Group Financial Venture Fund Managing Director Shea Wallon, who will join Cortera’s board of directors, said, “Cortera’s unique business information and analytics provide an alternative view into the credit risk of private businesses where traditional financial statements are not reliable or easily available.”

Cortera demoed a network where businesses can share payment experiences at FinovateSpring 2010. Earlier this week, the company announced its trade credit data will be available in Moody’s Analytics RiskCalc small business solution. Last spring, Cortera scored LexisNexis as a client, blending its B2B trade credit with LexisNexis’ risk solutions alternative data.

Share this:

Send Post Twitter LinkedIn Facebook

Finovate Alumni News

By David Penn Posted on
Categories: Avaloq, Fenergo, Flywire, HackerOne, ID.me, Infosys, ISARA, Jack Henry, Mortgage Cadence, Onfido, Promontech, WePay

On Finovate.com

  • Onfido to Help Crowdfunding Platform Indiegogo Fight Fraud.

Around the web

  • The Technology Transformation Service of the U.S. General Services Administration awards $2 million bug bounty contract to HackerOne.
  • Mortgage Cadence integrates LoanBean’s income calculation solution into its end-to-end loan origination platform.
  • Minnesota-based Glenwood State Bank ($289 million in assets) to deploy Jack Henry SilverLake core banking platform.
  • Avaloq taps former Credit Suisse executive Michael Pahlke as Chief Service Delivery Officer (CSDO).
  • ID.me founder and CEO Blake Hall earns spot on Washingtonian’s Tech Titans 2018: Washington’s Top Tech Leaders.
  • Infosys announces plans to open tech hub in Arizona and hire 1,000 Americans by 2023.
  • PromonTech integrates its POS platform, Borrower Wallet, with GSF Mortgage.
  • Forbes features Tina Hsiao is COO at WePay.
  • Fenergo doubles revenue for 2nd year & expands into new market segments.
  • ISARA partners with DigiCert and Gemalto to develop digital certificates and secure key management for connected devices.
  • Flywire partners with Allianz Global Assistance to enable families to purchase Allianz’s GradGuard Tuition Protection Plan.
  • Trustly’s Pay N Play solution to power Gaming Innovation Group fast-registration and withdrawal feature.

This post will be updated throughout the day as news and developments emerge. You can also follow all the alumni news headlines on the Finovate Twitter account.

Share this:

Send Post Twitter LinkedIn Facebook

FinovateFall 2018: Be There … In Times Square

FinovateFall 2018: Be There … In Times Square
By David Penn Posted on
Categories: FinovateFall 2018

FinovateFall 2018 is only a few days away! The curtain will rise on the Finovate stage next week on Monday, September 24, and the conference will continue over the next three days with live fintech demonstrations, in-depth panel discussions, and illuminating keynote addresses.

We’ve spent a good chunk of the summer working with our demoing companies and talking with industry experts in preparation for what we think could be our most amazing FinovateFall to date. And as the attendee registrations have rolled in, we’ve managed to get a clearer picture of the kind of professionals you’ll be rubbing elbows with in the main hall and during our networking sessions. Check them out below.

To help everyone get ready for next week’s event, here’s a quick run-down of need-to-knows to ensure you make the most of this year’s FinovateFall. And if you’ve been on the fence about attending, don’t worry. There’s still time to pick up a ticket and join us. So visit our registration page and save your spot today.

Who?

Nearly 80 demoing companies, 100+ expert speakers and panelists, 1500+ professional attendees including – as shown above – CEOs and founders, CTOs and engineers, Directors, VPs, and more.

What?

Two days of live fintech demonstrations. Two days of fascinating keynotes, panel discussions and debates on some of the critical topics in fintech today. And four days of top quality networking with the founders and funders, developers and directors who are making sure that the best technologies find valuable and insightful use cases within fintech.

Our partnership with networking app Brella was a huge success at FinovateSpring in helping attendees meet and mingle. So we’re thrilled to bring Brella to New York for FinovateFall. Visit our Brella page to learn more.

Where?

FinovateFall returns to New York City next week, setting up shop for the first time in historic Times Square. Join us on the fifth and sixth floors of the New York Marriott Marquis at 1535 Broadway, New York, NY, 10036.

When?

The conference begins on Monday, September 24, with registration opening at 8am and the first demo kicking things off at 8:45am. We’ll have a second day of live demos on Tuesday with the same start times before transitioning to our Discussion Day conversations on Wednesday. And remember our special summit day on Thursday focusing on AI and blockchain technology. To help plan your week, check out our conference agenda.

Why?

To see and hear about tomorrow’s fintech today, that’s why! FinovateFall provides attendees with the unique opportunity to watch some of the most cutting edge financial technology demonstrated live on stage. And with our new expanded format, attendees will have the opportunity to dive deeper into the trends and themes that are driving fintech innovation.

We’re excited for this year’s FinovateFall conference. If you have questions about the conference or your visit, please reach out to our staff who will be happy to help. See you bright and early Monday morning!

Share this:

Send Post Twitter LinkedIn Facebook

DefenseStorm Forges Strategic Partnership with Alogent

DefenseStorm Forges Strategic Partnership with Alogent
By David Penn Posted on
Categories: DefenseStorm

The newly-forged strategic partnership between Alogent and DefenseStorm is a reminder of the importance of cybersecurity to the world of digital banking. The two companies – an end-to-end payment processing, content management, and digital banking technology provider, and a real-time cybersecurity and cybercompliance specialist – are teaming up to help institutions manage and control their digital workflow, including the ability to better defend themselves from outside threats.

“As financial institutions increasingly adopt digital, mobile, and self-service solutions to meet consumer demand, they must be increasingly diligent about protecting their operations and their customers from cyber threats,” Jason Schwabline, Alogent SVP of Product Management and Strategy explained. “We have made it a priority to help our customers address what can be a costly and labor intensive challenge by partnering with a company that focuses exclusively on bringing effective and affordable cybersecurity and cybercompliance to credit unions and banks.

“Alogent’s digital and cloud solutions are perfect complements to the DefenseStorm GRID,” company Chief Revenue Officer Steve Soukup added. “(GRID) leverages cloud technology to keep cybersecurity and cybercompliance continuously current, scalable, and affordable.” Soukup emphasized that the key to success in working with banks and credit unions on cybersecurity is focusing exclusively on these institutions’ needs. Doing so, according to Soukup, enables FIs to “detect, investigate and resolve outside threats, even when resources are constrained.”

Founded in 2015, DefenseStorm demonstrated its PatternScout anomaly detection engine at FinovateSpring 2017. The firm, with offices in Atlanta, Georgia; and Seattle, Washington, specializes in helping regional and community banks and credit unions meet the challenge of ever-evolving cyber threats. The DefenseStorm GRID is a co-managed, cloud-based, and compliance-automated solution that monitors all activity on the bank or credit union’s network, and compares this activity in real time to the firms’ cyberexposure readiness policy to help institutions become and remain both alert and accountable.

DefenseStorm has raised $14.9 million in funding, and includes TTV Capital, Washington Trust, Live Oak Banking Company, and Citizens National Bank among its investors. This summer, DefenseStorm announced that it had been picked by NAFCU as the preferred cloud-based cybersecurity partner. In March, it was named a Top 40 Innovative Technology Company by the Technology Association of Georgia (TAG). The company began the year with news of its partnership with American National Bank, a Florida-based community bank with more than $280 million in assets.

Share this:

Send Post Twitter LinkedIn Facebook

Finovate Alumni News

By David Penn Posted on
Categories: AlphaPoint, Bambu, CallVU, DefenseStorm, Enveil, Exate, HackerOne, Market IQ, Payfone, Ripple

On Finovate.com

  • DefenseStorm Forges Strategic Partnership with Alogent.
  • FinovateFall 2018: Be There … In Times Square.

Around the web

  • Ripple reaches milestone as its RippleNet network is now live in more than 40 countries across six continents.
  • Bambu, Exate Technology, and Market IQ are among the seven startups selected for Plug and Play ADGM’s three-month accelerator program.
  • AlphaPoint appoints Moishe Gubin to its board of directors.
  • CallVU to provide an international credit company with biometric authentication via its digital engagement platform.
  • Enveil and Payfone earn spots on the 2018 SINET 16 Innovators roster.
  • Fifth Domain features Hacker One in a look at how white hat hackers could help improve voting machine security.

This post will be updated throughout the day as news and developments emerge. You can also follow all the alumni news headlines on the Finovate Twitter account.

Share this:

Send Post Twitter LinkedIn Facebook

Webinar: 5 Surprising Ways to Reduce Abandonment During Online Identity Verification

Webinar: 5 Surprising Ways to Reduce Abandonment During Online Identity Verification
By Sophie Cater Posted on
Categories: Jumio, Webinars

 

Increasingly, financial services companies and retail banks are going digital — not necessarily by choice — but as a result of new competitive threats that include new challenger (digital) banks, upstart fintech companies, and even the likes of Amazon and Google. Going digital and giving your customers the ability to open new accounts online lets you cast a wider net and attract more customers across a bigger geography. In fact, some studies suggest that this option translates into 55% more people applying for new accounts.

But, this opportunity is being squandered.

Recent research carried out by digital identity specialist Signicat suggests that retail banks now lose as many as 52% of potential customers at the on-boarding stage, an increase of 35% in the last two years. Much of the abandonment occurs during the identity verification process. It’s not all that surprising that so many online account applications are being abandoned when the enrollment process is time-consuming, complicated, and taxing. In this webinar, you’ll discover some clever tips and tricks and best practices from Jumio, the global leader in online identity verification, including:

  • The importance of offering multiple channels for ID capture
  • The subtle art of messaging & its impact on conversions
  • The critical need to reduce the number of screens
  • Why you need a “yes” or a “no” verification decision….and not a “maybe”

 

Moderator: David Penn
Research Analyst
Finovate

More than 15 years experience as a writer, blogger, and journalist covering financial markets and technology. Formerly Editor-in-Chief of TradingMarkets.com, staff writer for Technical Analysis of Stocks & Commodities magazine, and blogger for Linux Journal, I am currently a research analyst with The Finovate Group.

Dean Nicolls
Vice President
Jumio

Dean Nicolls is Jumio’s most recent addition to the executive team. He has 25+ years’ experience in B2B marketing focusing on cloud services. These include roles at Starbucks, Microsoft and variety of early stage cloud-based security companies including LiveOffice (acquired by Symantec), TeleSign (acquired by BICS) and, most recently, Infrascale. At Jumio, Dean is responsible for all branding, PR/analyst relations, product messaging, demand generation, and sales/channel enablement. He holds a Bachelor of Science degree in Business Administration from Pepperdine University and an MBA from the University of Washington.

Share this:

Send Post Twitter LinkedIn Facebook

CardFlight’s New Release Adds Paper Receipt Printing, Advanced Security, and More

CardFlight’s New Release Adds Paper Receipt Printing, Advanced Security, and More
By Julie Muhn (@julieschicktanz) Posted on
Categories: CardFlight

Mobile POS and payment technology company CardFlight has upgraded its flagship SwipeSimple technology, announcing version 5 of the product this week.

The new enhancements, which will be available to existing users starting next week, are aimed to offer merchants more payment acceptance capabilities. Some of the updates include:

  • Paper receipt printing
  • Discount options that allow merchants to set up dollar or percentage discounts that can be applied to either specific items or an entire transaction
  • Item categories for inventory tracking and marketing insights
  • Favorites pages on the checkout screen that show frequently used discounts and popular items
  • Item images on the checkout screen to help quickly find items for a transaction
  • SwipeSimple Virtual Terminal that helps reduce fraud using full Address Verification Service (AVS) for card not present transactions

This release comes just after CardFlight updated thousands of card readers for more than 45,000 merchants currently using SwipeSimple to enable EMV Quick Chip for faster processing times.

“At CardFlight, we continually work to make SwipeSimple the best payment acceptance technology for merchants all across the country,” said Derek Webster, CardFlight’s founder and CEO. “We know that tens of thousands of businesses rely on our technology to run and grow their businesses. Releasing Version 5.0 of SwipeSimple demonstrates our team’s dedication to putting easy to use, efficient payment acceptance tools in the hands of our users.”

Founded in 2013, CardFlight serves 10 of the top 30 merchant acquirers in the U.S., reaching tens of thousands of merchants across all 50 states. To date, more than 93% of its merchant clients are EMV-enabled. The New York-based company debuted its technology at FinovateSpring 2013, showing off the first iteration of its API/SDK. Earlier this summer, CardFlight landed a distribution partnership with BoomTown.

Share this:

Send Post Twitter LinkedIn Facebook