HackerOne Blog

Exposure Management

The Exposure Debt Benchmark: What the 2026 Data Says About the Find-to-Fix Gap

October 14, 2026

Exposure management is falling behind discovery. See how backlogs grew 131% while resolution time fell to 62 days, and download the 2026 report.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

Offensive Security

Benchmark Analysis: Annual Pentest and Code Review Coverage

July 14, 2022

How many annual pentests, code reviews, SAST/DAST scans should your organization conduct?

Exposure Management

5 Articles to Get You Up-to-Speed on Bug Bounty Programs

July 7, 2022

This article shares five valuable resources about bug bounty programs, why they are useful, how...

Exposure Management

Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks

July 5, 2022

MITRE Releases 2022 CWE Top 25 The popular CWE Top 25 list, which ranks the...

Exposure Management

How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours

June 16, 2022

When PullRequest was acquired, these concerns became HackerOne’s challenges. When we finalized the acquisition, we...

Exposure Management

CISOs: Do You Know the Security Risks of Your Organization's Next M&A?

June 14, 2022

First, I will discuss the inherent risks associated with M&As as attack surfaces grow. A...

Exposure Management

How to Catch Injection Security Vulnerabilities in Code Review

June 9, 2022

Understanding Injection Vulnerabilities Injection vulnerabilities exist when information provided by users of the application is...

Protect Critical Infrastructure from Threats

Exposure Management

How Critical Infrastructure Can be Protected from Threats

June 2, 2022

Accessing a major critical infrastructure network is very appealing to cybercriminals, as they can maximize...

Exposure Management

Ethical Hackers Help Beiersdorf Minimize Risk and Protect Their Attack Surface

June 2, 2022

Beiersdorf’s cybersecurity team is always thinking about the best ways to secure their public-facing assets...

Programmer setting up a security.txt file

Security Compliance

Exposure Management

What Is a Security.txt File and How Can It Help Your Security Program?

May 27, 2022

What is a security.txt file and how can it help your program?