HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Flexible Data Retrieval at Scale with HAQL

November 15, 2024

HAQL: HackerOne's simplified query interface for writing performant aggregate queries on tables modeled purposefully for data analysis.

AI in SecOps: How AI is Impacting Red and Blue Team Operations

November 15, 2024

View survey results and analysis of how AI in SecOps is impacting red and blue team operations.

Culture & Talent

HackerOne’s Fall Day of Service

November 13, 2024

Employees had the chance to connect over shared goals and values, fostering stronger relationships beyond...

Exposure Management

How HackerOne Disproved an MFA Bypass With a Spot Check

November 13, 2024

Read how HackerOne's internal security team disproved an alleged MFA bypass with a targeted Spot Check.

Culture & Talent

Unlocking Engagement with Employee Feedback

November 6, 2024

Since 2018, HackerOne has maintained an employee engagement survey participation rate of over 80%, with...

Ethical hackers fixing improper access control vulnerabilities

Exposure Management

How an Improper Access Control Vulnerability Led to Account Theft in One Click

November 6, 2024

Let’s look more closely at the improper access control vulnerability type — what it is, how it’s used, and how to remediate it.

Exposure Management

How an Information Disclosure Vulnerability Led to Critical Data Exposure

November 5, 2024

Information disclosure is the #2 most common security vulnerability. Learn what information disclosure is, its impacts, and how to prevent it.

Ethical hacker finding XSS vulnerabilities

Exposure Management

How a Cross-Site Scripting Vulnerability Led to Account Takeover

November 4, 2024

Cross-site scripting (XSS) is the number one most common security vulnerability. Learn what XSS is, its impacts, and how to prevent it.

Hacker discovering a business logic vulnerability

Exposure Management

How a Business Logic Vulnerability Led to Unlimited Discount Redemption

November 1, 2024

Learn about the impact, severity, and a real-world example of business logic vulnerabilities.