HackerOne Blog

Exposure Management

7 Predictions Defining the Move to Always-On Cybersecurity in 2026

December 9th, 2025

Security leaders forecast 2026 as the year CTEM becomes essential, with AI-driven threats, agentic security, and continuous validation reshaping cyber risk.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

Outsmart Cybercriminals with Proactive Attack Surface Management (ASM)

February 7th, 2023

Why is ASM Important? Your attack surface is the sum of all entry points an...

Exposure Management

Beyond a VDP: How a Challenge Brings Proactive Security to Your Agency

January 31st, 2023

Vulnerability Disclosure Programs create an effective means for researchers and other users to report discovered...

Exposure Management

Introducing Program Levels: Hacker-friendly Practices that Improve Program Results

November 16th, 2022

One of the most important lessons we have learned is that organizations with the most...

Exposure Management

Offensive Security

Introducing Unified HackerOne Scope Management with Burp Suite Support

September 15th, 2022

This post will start with the basics of defining scope and how ethical hackers and...

Exposure Management

Offensive Security

Benchmark Analysis: Annual Pentest and Code Review Coverage

July 14th, 2022

How many annual pentests, code reviews, SAST/DAST scans should your organization conduct?

Exposure Management

5 Articles to Get You Up-to-Speed on Bug Bounty Programs

July 7th, 2022

This article shares five valuable resources about bug bounty programs, why they are useful, how...

Exposure Management

Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks

July 5th, 2022

MITRE Releases 2022 CWE Top 25 The popular CWE Top 25 list, which ranks the...

Exposure Management

How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours

June 16th, 2022

When PullRequest was acquired, these concerns became HackerOne’s challenges. When we finalized the acquisition, we...

Exposure Management

CISOs: Do You Know the Security Risks of Your Organization's Next M&A?

June 14th, 2022

First, I will discuss the inherent risks associated with M&As as attack surfaces grow. A...