HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

How to Become a Successful Bug Bounty Hunter

April 21, 2016

If you ever dreamed of becoming a bounty hunter, your dreams can come true --...

Top 5 Most Viewed Bugs of 2016

April 15, 2016

Public vulnerability reports are security gold - everyone benefits from the shared knowledge. There are...

5 Things Top Bug Bounty Hunters Do Differently

April 7, 2016

This week, we had the pleasure of hosting 50 Belgian technology students, who were on...

You Received A Vulnerability Report, Now What? 6 Steps to Resolution

April 5, 2016

When you discover a vulnerability, fixing it is not just a matter of applying a...

Hack the Pentagon Bug Bounty Program Launches on HackerOne

March 31, 2016

Hack the Pentagon?! On Thursday, March 31, 2016, the Department of Defense, arguably the world's...

Hacker Blogs We Love Reading

March 29, 2016

UPDATED: Please note that we updated this post on 5/5 with even more blogs our...

6 Ways to Build Great Relationships with Security Teams

March 24, 2016

One of the most common questions we get from new hackers is "How can I...

Environment Is Everything, and Other Tips For Your Open Source Project

March 17, 2016

In 2014, HackerOne launched their first open source project and two years in, we have...

Improving Public Bug Bounty Programs with Signal Requirements

March 15, 2016

HackerOne has added two improvements that increase vulnerability report quality for public disclosure and bug...