HackerOne Blog

Read the HackerOne blog to learn strategies for strengthening your attack resistance with help from highly skilled ethical hackers. Improve your security profile and stay up to date on industry trends and emerging threats.

Get the latest news and insights beamed directly to you.

Hacker discovering a business logic vulnerability

Vulnerability Management

How a Business Logic Vulnerability Led to Unlimited Discount Redemption

Learn about the impact, severity, and a real-world example of business logic vulnerabilities.

Security Compliance,

Public Policy

2024 Budget Planning: Preparing For U.S. Mandates to Implement Vulnerability Disclosure Policies (VDPs)

November 9th, 2023

U.S. policymakers are increasingly encouraging and mandating public and private sector organizations to enhance their cybersecurity programs by adopting VDPs. Have you planned for a VDP in next year’s budget?

Penetration Testing

What Is the Difference Between Pentesting and Bug Bounty?

November 8th, 2023

Do pentesting and bug bounties serve the same purpose or complement each other? Let’s explore the four different approaches to pentests and the key differences between bug bounty and pentesting.

Vulnerability Management

5 Common Mistakes When Running a Bug Bounty Program

October 31st, 2023

Why do organizations experience challenges when running bug bounty programs?

Live Hacking Events

Salesforce Teams Up With All-Star Hackers at H1-4420

October 30th, 2023

Salesforce and HackerOne joined 45 of the world’s best ethical hackers in London for a live hacking event.

HackerOne using GenAI for vulnerability detection and remediation

Thought Leadership,

Generative AI

Responsible AI at HackerOne

October 25th, 2023

At HackerOne, we are combining human intelligence with artificial intelligence at scale to improve the efficiency of people and unlock entirely new capabilities.

The Ultimate Guide to Managing Ethical and Security Risks in AI

Read the eBook

Hackers using EPSS integration in HackerOne Hacktivity

Vulnerability Management

Elevate CVE Remediation with EPSS, Now Integrated in HackerOne Hacktivity

October 24th, 2023

HackerOne has integrated EPSS scoring into Hacktivity for more comprehensive CVE remediation.

Ethical Hacker

Kicking Off the Final Round of the 2023 Ambassador World Cup

October 19th, 2023

The final round of the 2023 Ambassador World Cup is here — and what an exciting championship it will be. Here’s everything you need to know about this year’s World Cup and Final Four going into the finals.