The 6th Annual Hacker-Powered Security Report is here
Our latest report, with insights from 5,700+ hackers and the organizations that rely on them, is available now.

How large is your organization's attack resistance gap?

In just 5 minutes, this assessment sizes your unknown attack surface so you can start taking action to close your gap.

Take the Attack Resistance Assessment today

HackerOne Assets

Identify the unknown. Then secure it

Combine the power of attack surface management (ASM) with the reconnaissance skills of security researchers.

Watch the Demo

 

Security@ Beyond: 5-part webinar series
Deepen your knowledge with topics ranging from ASM to zero days and security mistakes around Web3.

Join the conversation

Application Security

Learn how to prevent vulnerabilities in your applications. We cover current practices in application security, cloud security, API testing, and more.

Category
All
All
HackerOne Blog - Human security testers
Application Security

How Human Testers Improve Application Security

A suite of DevSecOps tools is available to automate reviews, audits, tests, and scans throughout the development pipeline, which have become standard...

Popular posts
AWS SH

How a New HackerOne Integration with AWS Security Hub Accelerates Vulnerability Remediation Time

Company News, Ethical Hacker
The ICO’s 12-Step Guide to GDPR Compliance

The ICO’s 12-Step Guide to GDPR Compliance

Vulnerability Disclosure, Security Compliance, Company Resources, GDPR, Compliance
Hack The Pentagon Turns One on HackerOne

Hack The Pentagon Turns One on HackerOne

Ethical Hacker, Challenge, News, Customer Stories, Bounty
Key Findings From The Hacker-Powered Security Report: It’s Not Just For Tech (1 of 6)

Key Findings From The Hacker-Powered Security Report: It’s Not Just For Tech (1 of 6)

Security Compliance, Hacker Powered Security Report
Discover more with topics that matter to you most.
Application Security
Ethical Hacker
Company News
From The CEO
Security Compliance
Penetration Testing
Vulnerability Management
HackerOne Blog - Human security testers
Application Security

How Human Testers Improve Application Security

A suite of DevSecOps tools is available to automate reviews, audits, tests, and scans throughout the...
Application Security, Penetration Testing, Vulnerability Management

Introducing Unified HackerOne Scope Management with Burp Suite Support

This post will start with the basics of defining scope and how ethical hackers and testers use it in their...
HackerOne Blog
Application Security, Vulnerability Management

Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks

MITRE Releases 2022 CWE Top 25 The popular CWE Top 25 list, which ranks the most dangerous software...
DevSecOps Pipeline
Application Security

5 Security Stages of the DevSecOps Pipeline

DevSecOps builds on modern DevOps practices by incorporating security processes and automation into the...

Overlooked Server Permissions
Application Security

The Most Overlooked Server Permission Checks

We previously looked at common server authentication issues we see in code review and offered tips to avoid...
DevOps DevSecOps
Application Security

DevSecOps vs DevOps: What is the Difference?

DevSecOps can dramatically reduce cyber risk for organizations—particularly those that rely on internal...

What is Confluence CVE-2022-26134 and How Do I Fix It
Application Security

Severe Confluence Vulnerability is an Active Threat (CVE-2022-26134)

Background The vulnerability allows unauthenticated remote code execution (RCE). Exploitation occurs by...
pullrequest5ways
Application Security

5 Ways I Provide Value as a PullRequest Reviewer When I Start Reviewing a New Project

Important reviewer traits for providing a great code review include prior knowledge and experience, expertise...

From Around the Blog