HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Return on Mitigation

Calculating Cybersecurity ROI with Return on Mitigation (RoM)

July 1, 2025

Explore how Return on Mitigation (RoM) reframes cybersecurity ROI by highlighting the cost savings of proactive defense with a real-world example.

Operationalizing Gartner TRiSM: Testing AI for Trust, Risk, and Security

June 27, 2025

AI risks are systemic. Learn how to operationalize Gartner TRiSM framework with adversarial testing to validate and strengthen your AI security posture.

Crowdsourced Security

What We’ve Learned from 5 Months of Hackbot Activity

June 26, 2025

AI-powered hackbots are capturing bounties and reshaping offensive security. Here’s what we’ve learned in 5 months—and how to prepare for what’s next.

Crowdsourced Security

We’re Running Hai Insight Agent on Our Own Bug Bounty Program – See it in Action

June 24, 2025

Discover how HackerOne's Hai Insight Agent simplifies vulnerability analysis, accelerates resolution, and ensures consistent, accurate security decisions.

Exposure Management

Hai Insight Agent: The Teammate Who Remembers Every Report

June 24, 2025

Hai, HackerOne's AI security agent, transforms vulnerability reports into actionable insights, helping teams prioritize, act faster, and communicate risks clearly.

Public Policy

Promotion of AI Use by Government and Enhancing Security Are Key Themes Likely to Shape U.S. AI Action Plan

June 23, 2025

The Trump administration's AI policy is shaping up to prioritize responsible adoption by federal agencies and bolstered security for AI systems, with a focus on innovation, public trust, and national security.