HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

The Hacker-Powered Security Report: Insights from Over 800 Programs

June 27, 2017

Did you know 94% of the Forbes Global 2000 do not have known vulnerability disclosure...

Getting to know the HackerOne triage team with Zach Dando

June 20, 2017

If triaging vulnerability reports was a martial art, Zach Dando would be sensei master. Zach...

GitHub Embraces Hacker-Powered Security To Protect 55 Million Projects

June 15, 2017

We recently published The GitHub Bug Bounty Story and couldn’t be more excited to share...

How To: Server-Side Request Forgery (SSRF)

June 14, 2017

Server-Side Request Forgery, SSRF for short, is a vulnerability class that describes the behavior of...

It’s Phab-tastic! HackerOne integrates with Phabricator

June 13, 2017

Like many companies in Silicon Valley, we at HackerOne believe in using what we build...

The $30,000 Gem: Part 1

June 8, 2017

Opening your database to the world is a scary thought! But that’s exactly what we...

GitLab's Brian Neel on Secure Software Development and Bug Bounties

June 1, 2017

Did you miss our webinar with GitLab, Innovating Faster Without Sacrificing Security or Quality? It...

Put Your Security to the Test: Introducing HackerOne Challenge

May 18, 2017

Today we launch a new product, designed for every security team that runs periodic testing...

May 15, 2017

Hackers, do you have what it takes to hack the U.S. Air Force? Register now...