HackerOne Blog

The latest from HackerOne

6 Predictions Defining the Move to Always-On Cybersecurity in 2026

December 9th, 2025

Security leaders forecast 2026 as the year CTEM becomes essential, with AI-driven threats, agentic security, and continuous validation reshaping cyber risk.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Getting to know the HackerOne triage team with Zach Dando

June 20th, 2017

If triaging vulnerability reports was a martial art, Zach Dando would be sensei master. Zach...

GitHub Embraces Hacker-Powered Security To Protect 55 Million Projects

June 15th, 2017

We recently published The GitHub Bug Bounty Story and couldn’t be more excited to share...

How To: Server-Side Request Forgery (SSRF)

June 14th, 2017

Server-Side Request Forgery, SSRF for short, is a vulnerability class that describes the behavior of...

It’s Phab-tastic! HackerOne integrates with Phabricator

June 13th, 2017

Like many companies in Silicon Valley, we at HackerOne believe in using what we build...

The $30,000 Gem: Part 1

June 8th, 2017

Opening your database to the world is a scary thought! But that’s exactly what we...

GitLab's Brian Neel on Secure Software Development and Bug Bounties

June 1st, 2017

Did you miss our webinar with GitLab, Innovating Faster Without Sacrificing Security or Quality? It...

Put Your Security to the Test: Introducing HackerOne Challenge

May 18th, 2017

Today we launch a new product, designed for every security team that runs periodic testing...

May 15th, 2017

Hackers, do you have what it takes to hack the U.S. Air Force? Register now...

Bug Bounty Programs — Why Should I Care?

May 8th, 2017

Why should I care about bug bounty programs? Every digital company has software vulnerabilities, and...