HackerOne Blog

Exposure Management

The Exposure Debt Benchmark: What the 2026 Data Says About the Find-to-Fix Gap

October 14, 2026

Exposure management is falling behind discovery. See how backlogs grew 131% while resolution time fell to 62 days, and download the 2026 report.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

Code Security

H1 Code

Resurrecting Shift-Left With Human-in-the-loop AI

January 16, 2025

Let's explore how human-in-the-loop AI can help implement successful secure-by-design.

Exposure Management

Crowdsourced Security

Introducing Lightspark's Public Bug Bounty Program

January 15, 2025

Expanding Our Bug Bounty Program At Lightspark, we’ve always been focused on security that meets...

Exposure Management

ROI Isn’t Cutting It: 6 Questions to Help CISOs Better Quantify Security Investments

January 7, 2025

However, in cybersecurity, quantifying net profit becomes significantly more complex due to the intangible nature...

Exposure Management

The OWASP Top 10 for LLMs 2025: How GenAI Risks Are Evolving

December 18, 2024

The new OWASP Top 10 for LLMs is here. How has it changed, and how can organizations prevent GenAI risks?

Exposure Management

Breaking Down the OWASP Top 10: Insecure Design

December 17, 2024

Learn about the different types of insecure design vulnerabilities and how to identify them.

Exposure Management

Offensive Security

Azure Cloud Configuration Review

December 13, 2024

Learn the testing methodologies and security best practices for Azure Cloud Configuration Review.

Exposure Management

Crowdsourced Security

How a Privilege Escalation Led to Unrestricted Admin Account Creation in Shopify

December 12, 2024

This Shopify privilege escalation vulnerability could have resulted in the creation of unrestricted admin accounts.

Exposure Management

How Crypto and Blockchain Organizations Manage Complex Attack Surfaces With Competitive Security Testing Programs

December 12, 2024

What makes securing crypto and blockchain organizations so different than other industries? Let's look at the data.

Exposure Management

Crowdsourced Security

Introducing the Wells Fargo Public Bug Bounty Program

December 10, 2024

Wells Fargo announces its public bug bounty program after several years of engaging the HackerOne community.