HackerOne Blog

Exposure Management

The Exposure Debt Benchmark: What the 2026 Data Says About the Find-to-Fix Gap

October 14, 2026

Exposure management is falling behind discovery. See how backlogs grew 131% while resolution time fell to 62 days, and download the 2026 report.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Ethical hacker finding a backdoor vulnerability

Exposure Management

XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action

April 1, 2024

Learn about a backdoor vulnerability, its impacts, and the importance of securing open source.

Exposure Management

DevSecOps: How GitHub Bridges the Gap Between Security and Development

March 19, 2024

As a company that prizes security while serving tens of millions of developers worldwide, GitHub...

HackerOne triager performing bug triage best practices

Exposure Management

HackerOne’s In-Depth Approach to Vulnerability Triage and Validation

March 14, 2024

Not all VDP triage teams and workflows are created equal. Learn how HackerOne approaches vulnerability triage and validation.

Exposure Management

Shift Left is Dead: A Post Mortem

March 13, 2024

Shift left is dead. What now?

Developers finding code vulnerabilities with code security audit

Exposure Management

Offensive Security

How to Find Mistakes Earlier and Save Money With Code Security Audit

January 18, 2024

Learn how organizations can find mistakes earlier and save an average of $18,037 using Code Security Audit.

Exposure Management

HackerOne Partners With Semgrep to Combine Expert Code Review With Powerful Automation

January 11, 2024

HackerOne's partnership with Semgrep harnesses the power of automation and combines it with expert code review.

Exposure Management

How to Use Your Bug Bounty Budget Efficiently

December 13, 2023

Organizations of all sizes and budgets experience some of the same challenges when managing their bug bounty budgets.

Ethical hackers with HackerOne's Clear and Gateway programs

Exposure Management

How Do You Know Ethical Hackers Can Be Trusted?

December 11, 2023

HackerOne has rolled out new updates that make our human-powered security program the most trusted in the industry.

Mercado Libre working with ethical hackers in their public bug bounty program

Exposure Management

Mercado Libre’s Journey to a Public Bug Bounty Program

November 28, 2023

HackerOne is delighted to announce the launch of Mercado Libre’s Public Bug Bounty Program.