HackerOne Blog

Exposure Management

The Exposure Debt Benchmark: What the 2026 Data Says About the Find-to-Fix Gap

October 14, 2026

Exposure management is falling behind discovery. See how backlogs grew 131% while resolution time fell to 62 days, and download the 2026 report.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

3 Bug Bounty Lessons From Retail & eCommerce Customers

May 31, 2024

Learn 3 bug bounty lessons from HackerOne Retail & eCommerce customers.

Exposure Management

HackerOne Spot Checks for On-Demand, Targeted Security Testing

May 28, 2024

HackerOne Spot Checks: a specialized capability to bridge the gap between limited resources and thorough security.

Exposure Management

What Is a Vulnerability Disclosure Program and Do You Need One?

May 14, 2024

Are you wondering about Vulnerability Disclosure Programs (VDPs)? Here’s why you need one, and instructions on starting one or improving your current process.

Ethical hackers working on election security

Security Compliance

Exposure Management

How Ethical Hackers Are Securing Elections

May 14, 2024

Election technology manufacturers teamed up with ethical hackers to secure elections.

Exposure Management

How Serialized Cookies Led to RCE on a WordPress Website

May 9, 2024

Learn first-hand from a hacker about a Wordpress remote code execution vulnerability: how to identify it, its risks, and remediation.

Hacker discovering prompt injection vulnerability

Exposure Management

How a Prompt Injection Vulnerability Led to Data Exfiltration

April 29, 2024

As the use of GenAI and LLMs has ramped up, so have the vulnerabilities that come with them, and one of the worst is prompt injection.

Exposure Management

Human-Powered Security: The Value of Ethical Hackers & Bug Bounty

April 23, 2024

Who is an ethical hacker, what is a bug bounty program, and why is human-powered security the best method for strengthening your security posture?

Hacker discovering race condition vulnerability

Exposure Management

How a Race Condition Vulnerability Could Cast Multiple Votes

April 11, 2024

Hacker and Senior Solutions Architect Dane Sherrets tells the story of how a race condition vulnerability could cast multiple votes.

Exposure Management

The Importance of Credential Rotations: Best Practices for Security and Data Protection

April 5, 2024

Learn the importance of credential rotations and best practices for managing them effectively from HackerOne's experts.