HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Hai’s Latest Evolution: Intelligence, Context, and More Intuitive UX

December 3, 2024

Hai has 3 new capabilities: Hai analytics, contextual conversations, and an enhanced user experience.

Exposure Management

5 Questions to Assess Your Organization’s Bug Bounty Readiness

December 2, 2024

Is your organization ready for a bug bounty program? These 5 questions will help you find out.

Exposure Management

Why Retail and E-commerce Organizations Trust Security Researchers During the Holiday Shopping Season

November 27, 2024

Security leaders at REI, AS Watson, and Mercado Libre explain why retail and e-commerce organizations trust security researchers.

Security Compliance

Offensive Security

Network and Information Systems Directive (NIS2) Compliance: What You Need to Know

November 26, 2024

Learn about the new NIS2 Directive requirements and how to achieve compliance through pentesting, VDP, and bug bounty.

5 Insights Attendees Gained from the Security@ World Tour

November 25, 2024

Read the top 5 learnings attendees gained by joining one of our Security@ 2024 World Tour events.

Exposure Management

Breaking Down the OWASP Top 10: Injection

November 21, 2024

Gain insights into injection vulnerabilities, the different classifications, and potential security bypass techniques.

Exposure Management

How Inadequate Authentication Logic Led to an MFA Bypass and Account Takeover

November 20, 2024

Learn how inadequate authentication logic led to an MFA bypass, plus 11 authentication best practices to prevent vulnerabilities like these.

Culture & Talent

How HackerOne Employees Stay Connected and Have Fun

November 19, 2024

This year, we launched new initiatives designed to bring people together in fun and innovative...

Exposure Management

How REI Strengthens Security with HackerOne’s Global Security Researcher Community

November 18, 2024

REI's senior application security engineer discusses their program success, evolving goals, and the value of the security researcher community.