HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Culture & Talent

The Recruitment Process: What to Expect When You Apply at HackerOne

October 9, 2024

If you’re considering applying, here’s a look at what you can expect from the process...

Offensive Security

Pentesting for Internal Networks

October 9, 2024

Learn how to optimize internal network pentesting through community-driven pentesting as a service (PTaaS).

Security researcher finding IDOR vulnerability

Exposure Management

Offensive Security

How an IDOR Vulnerability Led to User Profile Modification

October 8, 2024

Learn the ins and outs of IDOR vulnerabilities and how one exploitation led to malicious user profile modification.

Ethical hacker finding broken access control vulnerabilities

Exposure Management

Security Research

How To Find Broken Access Control Vulnerabilities in the Wild

September 30, 2024

Learn the ins and outs of broken access control vulnerabilities and how to find them in your security research.

Offensive Security

You're Doing Pentesting Wrong

September 30, 2024

Pentesting is overdue for a refresh. Leveraging the power of the pentester community and the efficiency of a Pentest as a Service (PTaaS) platform, pentesting can add real value to your organization.

Public Policy

NIS2: Next Step Forward on EU Security Requirements

September 27, 2024

Everything you need to know about the next NIS2 Directive, what it means for you, and how to be compliant.

Code Security

A Guide To Subdomain Takeovers 2.0

September 25, 2024

Learn the ins and outs of understanding subdomain configurations with current resources and tools from an expert security researcher.

How to Streamline Your SDLC With Hai

September 25, 2024

Hai streamlines the SDLC with the tools to maintain consistency, automate tasks, and improve overall efficiency.

How to Accelerate Vulnerability Remediation with Hai

September 19, 2024

Hai, HackerOne's AI security agent, streamlines remediation efforts and accelerates the find-to-fix process.