HackerOne Blog

Exposure Management

The Exposure Debt Benchmark: What the 2026 Data Says About the Find-to-Fix Gap

October 14, 2026

Exposure management is falling behind discovery. See how backlogs grew 131% while resolution time fell to 62 days, and download the 2026 report.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

Understanding Public and Private Bug Bounties and Vulnerability Disclosure Programs

May 18, 2022

How Are Bug Bounty Programs and Vulnerability Disclosure Programs Different? Let’s start with the similarities...

Exposure Management

Announcing the Results of the 12-month DIB-VDP Pilot

May 2, 2022

Learn more about the DoD DIB-VDP Pilot here.

How Wix Uses HackerOne to Improve Their Cybersecurity Posture

Exposure Management

Crowdsourced Security

How Wix Improves Their Security Posture with Ethical Hackers

April 21, 2022

Reducing risk is fundamental to Wix’s approach to cybersecurity, and as the threat landscape evolves...

Exposure Management

Securing Digital Transformation with Vulnerability Disclosure: A Q&A with John Deere CISO, James Johnson

February 9, 2022

John Deere’s CISO, James Johnson, and his team are committed to ensuring that the people...

Exposure Management

Nine Months into the DIB-VDP Pilot, Nearly 1,000 Valid Vulnerabilities Have Been Identified

January 28, 2022

Maintaining the security of the digital assets within the Defense Industrial Base (DIB) contractor networks...

Log4J webinar with Chris Evans and Jobert Abma

Exposure Management

Log4Shell: Attack Evolution

January 6, 2022

For many security teams, the holiday season was spoiled by the challenging remediation of Log4Shell...

Exposure Management

CWE (Common Weakness Enumeration) and the CWE Top 25 Explained

December 16, 2021

Common Weakness Enumeration (CWE) is a system to categorize software and hardware security flaws—implementation defects...

Exposure Management

Log4j Vulnerability Activity on the HackerOne Platform

December 13, 2021

December 17th Update: Vulnerabilities in Log4j have been evolving over the course of this week...

Exposure Management

What Is The Common Vulnerability Scoring System (CVSS)

December 9, 2021

Organizations need to identify, prioritize, and remediate these vulnerabilities as soon as possible. CVSS is...