HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Top Vulnerability Reports of Third Quarter, 2016

October 28, 2016

It’s time for the third installment of Top 5 Vulnerability Reports on HackerOne. What a...

A HackerOne Thanksgiving

October 21, 2016

As a hacker, you know the best security bugs you reported to each program: the...

What a week! - HackerOne at WIRED Security

October 21, 2016

This week has been a whirlwind here at HackerOne! In addition to announcing a new...

Introducing Policy Change Notifications

October 21, 2016

Never miss a security page policy change with new Policy Versioning. Although you can browse...

HACK THE PENTAGON AGAIN - AND AGAIN

October 20, 2016

Defense Secretary Ash Carter announcing Hack the Pentagon results during a press conference Great news...

Announcing Hack The World 2016 Winners

October 20, 2016

Back in July we announced our Hack The World competition. The idea was simple: hack...

[CRITICAL!!] Introducing Severity (CVSS)

October 5, 2016

There’s been a severe lack of severity in your vulnerability reports… so we’re happy to...

Bug Bounty Programs Taking Off!

October 4, 2016

The more you let friendly hackers hack you, the less the criminals can hack you...

Hacker Hall of Fame Blog: Mark Litchfield “mlitchfield”

September 28, 2016

This blog is part of an interview series. These bug hunters continuously dominate the leaderboards...