Published on

TikTok's Commitment to Cybersecurity and User Safety

TikTok's Commitment to Cybersecurity and User Safety

At TikTok, the safety, security, and privacy of their global community are top priorities. With over 1 billion users, TikTok takes this responsibility seriously and continuously invests in people, processes, and technology to ensure best-in-class security operations at scale. They also collaborate with industry-leading organizations to promote cybersecurity best practices and raise awareness.

TikTok proudly supports cybersecurity initiatives by organizations like HackerOne, the Global Cyber Alliance (GCA), and the National Cybersecurity Alliance. They celebrate the 2-year anniversary of their Global Bug Bounty program, recognize the 2022 TikTok Cybersecurity Champions, and promote the #SeeYourselfInCyber initiative to encourage diverse participation in the industry. They also share tips to always stay safe online using the #BeCyberSmart hashtag.

As a founding sponsor of HackerOne's Corporate Security Responsibility (CSecR) pledge, TikTok emphasizes transparency, collaboration, innovation, and differentiation as core principles for creating a safer digital world. This aligns with their commitments when launching the Global Bug Bounty program. TikTok has awarded over $585,000 in bug bounties to ethical hackers who responsibly identified and disclosed vulnerabilities. Their comprehensive scope and commitment to transparency attract new hackers.

The top contributors to TikTok's bug bounty program this year are:

  • s3c: Yusuf, a 23-year-old bug bounty hunter from Kurdistan, Iraq
  • Apapedulimu: Nosa, a 22-year-old security engineer from Indonesia
  • Amakki: Abdulrahman, a 21-year-old bug bounty hunter from Saudi Arabia
  • datph4m: Pham, a security engineer from Vietnam

According to HackerOne CEO Marten Mickos, TikTok's software security success lies in transparency and engagement with ethical hackers. TikTok believes security is a team effort, both internally and on their platform. Their security experts and technologists work tirelessly to develop, implement, test, and maintain advanced security and privacy controls to protect the global community.

TikTok introduces the 2022 TikTok Cybersecurity Champions, who inspire others to make informed online choices. These creators share educational and entertaining content on TikTok to promote cybersecurity awareness. TikTok encourages individuals, regardless of technical background, to explore opportunities in the cybersecurity industry, including open roles within TikTok's security team.

To enhance cybersecurity best practices, TikTok sends in-app push notifications to encourage users to enable 2-step verification. They also provide tips through @TikTokTips videos, such as setting strong passwords, avoiding suspicious links and attachments, downloading apps from official stores, and using secure Wi-Fi connections or VPNs.

Lisa Plaggemier, executive director of the National Cybersecurity Alliance, emphasizes the importance of setting up 2-factor authentication and using a password manager for enhanced online security. Staying safe online is easier than you might think.

For more tips on defending against cyber threats, follow @TikTokTips. Additionally, check out the interactive Cybersecurity Toolkit for Individuals developed in collaboration with the GCA. TikTok has also launched a free toolkit in Spanish to help business owners protect themselves from cyber attacks.

Together with their partners and TikTok Cybersecurity Champions, TikTok aims to inspire individuals from all backgrounds to prioritize cybersecurity and stay safe online.