HackerOne Blog

Crowdsourced Security

What Are Bug Bounties and How Do They Work?

December 4th, 2025

Bug bounties give security researchers a structured way to report vulnerabilities. This guide explains how bug bounty programs work and why organizations use them.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

Crowdsourced Security

Introducing Lightspark's Public Bug Bounty Program

January 15th, 2025

Expanding Our Bug Bounty Program At Lightspark, we’ve always been focused on security that meets...

Exposure Management

Crowdsourced Security

How a Privilege Escalation Led to Unrestricted Admin Account Creation in Shopify

December 12th, 2024

This Shopify privilege escalation vulnerability could have resulted in the creation of unrestricted admin accounts.

Exposure Management

Crowdsourced Security

Introducing the Wells Fargo Public Bug Bounty Program

December 10th, 2024

Wells Fargo announces its public bug bounty program after several years of engaging the HackerOne community.

Exposure Management

Crowdsourced Security

Six Years of Proactive Defense: Deribit’s Journey with HackerOne

December 10th, 2024

Learn how Deribit uses its HackerOne bug bounty program for its proactive security strategy.

Crowdsourced Security

Pentesting for iOS Mobile Applications

August 29th, 2024

Learn the different methodologies and best practices for pentesting for iOS applications.

Security Research

Offensive Security

Crowdsourced Security

Setting Up an Environment for Web Hacking

May 7th, 2024

Security researcher Haoxi Tan provides all the tips and tricks for setting up the ultimate web hacking environment.

Mercado Libre merch during Ambassador World Cup

Crowdsourced Security

Join HackerOne’s Ambassador World Cup

May 6th, 2024

Learn the benefits of taking part in the Ambassador World Cup as a customer and how to get involved!

Crowdsourced Security

Capital One Teams Up With Top-Tier Ethical Hackers at H1-305

April 22nd, 2024

Capital One and 52 highly skilled global ethical hackers came together for the organization's second live hacking event with HackerOne.

Crowdsourced Security

How Ethical Hackers Help AS Watson Address Digital Risk

March 19th, 2024

Learn how AS Watson's bug bounty program helps them identify and remediate digital risk.