HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

CTEM

Exposure Management

Fixing the Fix Gap: Introducing H1 Remediation

July 29, 2026

Validated findings shouldn't stall in a backlog. H1 Remediation delivers source code-informed fix plans directly to your engineering team, automatically.

Exposure Management

H1 Response

What Hardware Manufacturers Can Learn From OPPO's Vulnerability Prioritization Program

July 14, 2026

Hardware manufacturers face a hard deadline under the EU Cyber Resilience Act. OPPO's structured program shows that early remediation of vulnerabilities helps reduce the risk of exploitation and minimizes the number of vulnerabilities that need to be reported.

CTEM

What Automated CTEM Tools Miss, and Why Human Attackers Still Win

July 10, 2026

Automated CTEM tools confirm what you already know to test for. Here's why adversarial exposure validation still requires human attackers to find chained exploits, business logic flaws, and AI-specific vulnerabilities.

CTEM

CTEM for AI Systems: How to Apply the 5-Stage Framework to Your AI Attack Surface

July 10, 2026

AI systems break traditional CTEM programs. Here's how to extend the five-stage framework to cover language models, agentic workflows, and training pipelines and close the gap before attackers do.

CTEM

The Complete Guide to Continuous Threat Exposure Management (CTEM)

July 2, 2026

Periodic scanning can't keep pace with how fast threats change. CTEM is the operating model replacing it, and this guide covers how to build one that actually works.

Security Research

Why the Best Researchers Are Thriving in the Age of AI

June 30, 2026

A HackerOne researcher who's crossed $1 million in earnings explains how he uses agentic AI to multiply his output, and why business logic flaws still require human judgment.

CTEM

Ask Us Anything: Closing the Discovery-Remediation Gap

June 25, 2026

AI is accelerating vulnerability discovery, but remediation workflows haven't kept pace. HackerOne leaders break down how organizations are building toward CTEM and what it takes to prioritize, validate, and fix what actually matters.

Code Security

HackerOne News

Patch the Planet: HackerOne Joins OpenAI's Daybreak Initiative to Secure Critical Open-Source Software

June 22, 2026

HackerOne is a launch partner in Patch the Planet, a new initiative pairing AI-assisted research with expert human validation to deliver verified fixes to open-source maintainers at scale.

CTEM

Exposure Management

Why Periodic Pentesting Falls Short: The Case for Continuous Security Validation

June 11, 2026

Quarterly pentests can't keep pace with an attack surface that changes daily. Enterprise CISOs are replacing periodic assessments with continuous security validation programs that surface real, exploitable risk before attackers do.