HackerOne Blog

Exposure Management

Exposure Management

Crowdsourced Security

Gain Actionable, Data-backed Insights with HackerOne Recommendations

February 6th, 2025

What if your security program could self-optimize? With HackerOne Recommendations, it can.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

How Crypto and Blockchain Organizations Manage Complex Attack Surfaces With Competitive Security Testing Programs

December 12th, 2024

What makes securing crypto and blockchain organizations so different than other industries? Let's look at the data.

Exposure Management

Crowdsourced Security

Introducing the Wells Fargo Public Bug Bounty Program

December 10th, 2024

Wells Fargo announces its public bug bounty program after several years of engaging the HackerOne community.

Exposure Management

Crowdsourced Security

Six Years of Proactive Defense: Deribit’s Journey with HackerOne

December 10th, 2024

Learn how Deribit uses its HackerOne bug bounty program for its proactive security strategy.

Exposure Management

5 Questions to Assess Your Organization’s Bug Bounty Readiness

December 2nd, 2024

Is your organization ready for a bug bounty program? These 5 questions will help you find out.

Exposure Management

Why Retail and E-commerce Organizations Trust Security Researchers During the Holiday Shopping Season

November 27th, 2024

Security leaders at REI, AS Watson, and Mercado Libre explain why retail and e-commerce organizations trust security researchers.

Exposure Management

Breaking Down the OWASP Top 10: Injection

November 21st, 2024

Gain insights into injection vulnerabilities, the different classifications, and potential security bypass techniques.

Exposure Management

How Inadequate Authentication Logic Led to an MFA Bypass and Account Takeover

November 20th, 2024

Learn how inadequate authentication logic led to an MFA bypass, plus 11 authentication best practices to prevent vulnerabilities like these.

Exposure Management

How REI Strengthens Security with HackerOne’s Global Security Researcher Community

November 18th, 2024

REI's senior application security engineer discusses their program success, evolving goals, and the value of the security researcher community.

Exposure Management

How HackerOne Disproved an MFA Bypass With a Spot Check

November 13th, 2024

Read how HackerOne's internal security team disproved an alleged MFA bypass with a targeted Spot Check.