HackerOne Blog

Offensive Security

What Are Bug Bounties and How Do They Work?

December 4th, 2025

Bug bounties give security researchers a structured way to report vulnerabilities. This guide explains how bug bounty programs work and why organizations use them.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Offensive Security

Ten Practical Tips For High-Value Pentest Engagements

April 4th, 2024

HackerOne's Spencer Chin and pentester Jasmin Landry give 10 tips for executing a successful pentest from start to finish.

Offensive Security

Pre-Pentest Checklist: Essential Questions to Answer Before Your Next Pentest

April 3rd, 2024

Explore the foundational aspects of pentesting—focusing on 12 questions that answer the "what" and "why" of pentesting.

Offensive Security

Decoding the Characteristics of Modern Pentesting: Effectiveness

March 20th, 2024

HackerOne pentest experts explore the "Effectiveness" factor of pentesting methods to see how each security testing alternative measures up.

Abstract imagery depicting pentest speed

Offensive Security

Decoding the Characteristics of Modern Pentesting: Speed

February 20th, 2024

HackerOne pentest experts explore the "Speed" factor of effective pentesting methods to see how each security testing alternative measures up.

Offensive Security

Recap: Elite Pentesters Tell All in a Live Q&A

January 25th, 2024

Three elite HackerOne pentesters recently shared their stories in a live AMA session that looked at the impact and results of community-driven pentesting.

Developers finding code vulnerabilities with code security audit

Exposure Management

Offensive Security

How to Find Mistakes Earlier and Save Money With Code Security Audit

January 18th, 2024

Learn how organizations can find mistakes earlier and save an average of $18,037 using Code Security Audit.

HackerOne named a "Leader" in the 2023 GigaOm PTaaS Radar Report

Offensive Security

Interpret the 2023 GigaOm PTaaS Radar Report with HackerOne

December 12th, 2023

HackerOne has been named a "Leader" and a "Fast Mover" in the 2023 GigaOm PTaaS Radar Report.

Offensive Security

What Is the Difference Between Pentesting and Bug Bounty?

November 8th, 2023

Do pentesting and bug bounties serve the same purpose or complement each other? Let’s explore the four different approaches to pentests and the key differences between bug bounty and pentesting.

Security leaders in application security

Exposure Management

Offensive Security

100 Conversations with Start-up Security Leaders

April 11th, 2023

1. Why are run-of-the-mill, traditional pentests not delivering effective results? Time and time again, I...