Join HackerOne at the RSA Conference 2023 April 24-27
Stop by Booth #6279, North Expo Hall, for coffee on us.

Don’t have an expo hall pass yet? We can fix that! Request a complimentary expo hall pass to RSA 2023

The 6th Annual Hacker-Powered Security Report is here
Our latest report, with insights from 5,700+ hackers and the organizations that rely on them, is available now.

How large is your organization's attack resistance gap?

In just 5 minutes, this assessment sizes your unknown attack surface so you can start taking action to close your gap.

Take the Attack Resistance Assessment today

HackerOne Assets

Identify the unknown. Then secure it

Combine the power of attack surface management (ASM) with the reconnaissance skills of security researchers.

Solutions
Solutions
Solutions
Attack Resistance Management
Understand your attack surface, test proactively, and expand your team.
Vulnerability Management
Fortify your current program with comprehensive security testing.
Cloud Security
Protect your cloud environment against multiple threat vectors.
Application Security
Integrate continuous security testing into your SDLC.
Industries
Financial Services
Government
US Federal
Products
Products
Explore Products
Platform Overview
The security testing platform that never stops.
HackerOne Bounty
Uncover critical vulnerabilities that conventional tools miss.
HackerOne Assets
Attack surface management informed by hacker insights.
HackerOne Response (VDP)
Reduce risk with a vulnerability disclosure program (VDP).
HackerOne Services
Mature your security readiness with our advisory and triage services.
HackerOne Insights
View program performance and vulnerability trends.
HackerOne Assessments
Assess, remediate, and secure your cloud, apps, products, and more.
HackerOne Pentests
Meet vendor and compliance requirements with a global community of skilled pentesters.
Partners
Partners
Partners
Partner Overview
Explore our technology, service, and solution partners, or join us.
Integrations
Integrate and enhance your dev, security, and IT tools.
AWS
Protect your cloud environment with AWS-certified security experts.
Company
Company
Company
About Us
We empower the world to build a safer internet.
Leadership
Meet the team building an inclusive space to innovate and share ideas.
Careers
Want to make the internet safer, too? Join us!
Trust
Earning trust through privacy, compliance, security, and transparency.
Customers
Customers all over the world trust HackerOne to scale their security. See how they succeed.
In the News
Press
Press Releases
Hackers
Hackers
For Hackers
Hackers
Hack, learn, earn. See what the HackerOne community is all about.
Hacker101
Free videos and CTFs that connect you to private bug bounties.
Hacktivity
Watch the latest hacker activity on HackerOne.
Opportunities
Find disclosure programs and report vulnerabilities.
Leaderboard
See the top hackers by reputation, geography, OWASP Top 10, and more.
h@cktivitycon
Join the virtual conference for the hacker community, by the community.
Resources
Resources
Resources
Resource Center
The latest news, insights, stories, blogs, and more.
Documentation
Explore our product features.
Events
Join us for an upcoming event or watch a past event.
Security@ Conference
Knowledge Center
Application Security
Attack Surface
Cloud Security
Cybersecurity Attacks
DevSecOps
OWASP
Penetration Testing
Security Compliance
Vulnerability Assessment
Blog Categories
Blog
Application Security
Company News
Ethical Hacker
Penetration Testing
Security Compliance
Vulnerability Management
Community

Application Security

Learn how to prevent vulnerabilities in your applications. We cover current practices in application security, cloud security, API testing, and more.

Category

Application Security

Penetration Testing

Security Compliance

Vulnerability Management

All

Ian Carroll, Staff Security Engineer @ Robinhood

Customer Stories, Bounty, Application Security, Best Practices

Seven years of bug bounty, 21-hour average time to bounty, 130 hackers thanked, and hackers on both sides of the program: Robinhood’s Ian Carroll...

Ian Carroll, Staff Security Engineer @ Robinhood

Customer Stories, Bounty, Application Security, Best Practices

Seven years of bug bounty, 21-hour average time to bounty, 130 hackers thanked, and hackers on both sides of...

HackerOne Blog - Human security testers

Application Security

A suite of DevSecOps tools is available to automate reviews, audits, tests, and scans throughout the...

Application Security, Penetration Testing, Vulnerability Management

This post will start with the basics of defining scope and how ethical hackers and testers use it in their...

HackerOne Blog

Application Security, Vulnerability Management

MITRE Releases 2022 CWE Top 25 The popular CWE Top 25 list, which ranks the most dangerous software...

DevSecOps Pipeline

Application Security

DevSecOps builds on modern DevOps practices by incorporating security processes and automation into the...

Overlooked Server Permissions

Application Security

We previously looked at common server authentication issues we see in code review and offered tips to avoid...

DevOps DevSecOps

Application Security

DevSecOps can dramatically reduce cyber risk for organizations—particularly those that rely on internal...

What is Confluence CVE-2022-26134 and How Do I Fix It

Application Security

Background The vulnerability allows unauthenticated remote code execution (RCE). Exploitation occurs by...

Application Security

Vulnerability Management

Security Compliance

Penetration Testing