HackerOne Blog

Security Research

New approach blog

Return on Mitigation

Security Research

A New Approach to Proving Cybersecurity Value (That Isn’t ROI)

February 14th, 2025

Over the past 8 months, Luke (hakluke) Stephens and I have spoken with 10 security...

Read Now

All

AI

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Hacking tools for ethical hackers

Security Research

104 Hacking Tools and Resources

January 14th, 2026

Updated list of 104 hacking tools and resources for security researchers, covering web proxies, recon, API testing, mobile, cloud, and more.

White Tech Background

Security Research

The Security Researcher Who Thinks Like a Pastor

January 13th, 2026

What do pastoring and vulnerability research share? Presence. Evan Connelly explains how attention, patterns, and prevention shape better security work.

Hacker performing research

Security Research

A Safer Future for Security Research: Landmark Moves in Portugal and the UK

December 18th, 2025

Portugal’s Article 7 and the UK’s proposed statutory defence mark major steps toward protecting good-faith security research. Explore how these reforms reduce risk and strengthen coordinated vulnerability disclosure.

Hacker Powered Security Report Cover

Security Research

3 Signals You Can’t Ignore from the 2025 Hacker-Powered Security Report

November 4th, 2025

AI is reshaping cybersecurity. Explore key findings from experts on how researchers, automation, and human insight are redefining defense in 2025.

New approach blog

Return on Mitigation

Security Research

A New Approach to Proving Cybersecurity Value (That Isn’t ROI)

February 14th, 2025

Over the past 8 months, Luke (hakluke) Stephens and I have spoken with 10 security...

hackbots

Security Research

Welcome, Hackbots: How AI Is Shaping the Future of Vulnerability Discovery

February 3rd, 2025

What are Hackbots and how are they impacting vulnerability discovery and the researcher community?

Ethical hacker finding broken access control vulnerabilities

Exposure Management

Security Research

How To Find Broken Access Control Vulnerabilities in the Wild

September 30th, 2024

Learn the ins and outs of broken access control vulnerabilities and how to find them in your security research.

Authentication bypass

Exposure Management

Security Research

How a GraphQL Bug Resulted in Authentication Bypass

July 29th, 2024

Experienced security researchers explain how a GraphQL bug resulted in authentication bypass — and how to avoid it.

An ethical hacker finding an XSS vulnerability

Security Research

How to Find XSS

June 25th, 2024

Security researcher Haoxi Tan breaks down the best practices and tools for finding the different types of XSS vulnerabilities.