HackerOne Blog

Exposure Management

Exposure Management

Crowdsourced Security

Gain Actionable, Data-backed Insights with HackerOne Recommendations

February 6th, 2025

What if your security program could self-optimize? With HackerOne Recommendations, it can.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Exposure Management

Human-Powered Security: The Value of Ethical Hackers & Bug Bounty

April 23rd, 2024

Who is an ethical hacker, what is a bug bounty program, and why is human-powered security the best method for strengthening your security posture?

Hacker discovering race condition vulnerability

Exposure Management

How a Race Condition Vulnerability Could Cast Multiple Votes

April 11th, 2024

Hacker and Senior Solutions Architect Dane Sherrets tells the story of how a race condition vulnerability could cast multiple votes.

Exposure Management

The Importance of Credential Rotations: Best Practices for Security and Data Protection

April 5th, 2024

Learn the importance of credential rotations and best practices for managing them effectively from HackerOne's experts.

Ethical hacker finding a backdoor vulnerability

Exposure Management

XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action

April 1st, 2024

Learn about a backdoor vulnerability, its impacts, and the importance of securing open source.

Exposure Management

DevSecOps: How GitHub Bridges the Gap Between Security and Development

March 19th, 2024

As a company that prizes security while serving tens of millions of developers worldwide, GitHub...

HackerOne triager performing bug triage best practices

Exposure Management

HackerOne’s In-Depth Approach to Vulnerability Triage and Validation

March 14th, 2024

Not all VDP triage teams and workflows are created equal. Learn how HackerOne approaches vulnerability triage and validation.

Exposure Management

Shift Left is Dead: A Post Mortem

March 13th, 2024

Shift left is dead. What now?

Developers finding code vulnerabilities with code security audit

Exposure Management

Offensive Security

How to Find Mistakes Earlier and Save Money With Code Security Audit

January 18th, 2024

Learn how organizations can find mistakes earlier and save an average of $18,037 using Code Security Audit.

Exposure Management

HackerOne Partners With Semgrep to Combine Expert Code Review With Powerful Automation

January 11th, 2024

HackerOne's partnership with Semgrep harnesses the power of automation and combines it with expert code review.