HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

child adult play with large bright light game

Tips for Parents Working from Home from HackerOne Employees

August 5, 2024

At HackerOne, we've witnessed our parents craft impressive solutions to blend their professional and personal...

Exposure Management

Security Page Updates: Boosting Consistency & Transparency for Security Researchers and Customers

August 1, 2024

HackerOne has launched new updates to program security pages that standardize policy fields and drive hacker engagement.

Gateway Internal Network Testing with HackerOne

Offensive Security

Introducing HackerOne Gateway Internal Network Testing: Superior Security for Internal Networks

July 30, 2024

Introducing Gateway Internal Network Testing (INT), powered by Cloudflare’s Zero Trust Network Access (ZTNA) technology.

Exposure Management

Security Research

How a GraphQL Bug Resulted in Authentication Bypass

July 29, 2024

Experienced security researchers explain how a GraphQL bug resulted in authentication bypass — and how to avoid it.

person with hackerone hoodie walking to lincoln memorial

Lessons from HackerOne’s First Recharge Week

July 26, 2024

Our first-ever Recharge Week – July 1–5, 2024—aimed at giving most company employees a simultaneous...

Security Compliance

Exposure Management

Public Policy

Are You Ready for the New NIST Control Around Public Disclosure Programs?

July 25, 2024

A new NIST control requires SaaS vendors to “establish a public reporting channel for receiving reports of vulnerabilities in organizational systems and system components.”