HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

employees join a virtual meeting to plan hack week

How HackerOne Organizes a Remote Hack Week

July 17, 2024

This year's Hack Week was dedicated to artificial intelligence (AI), and teams worked together to...

10 Years of the GitHub Security Bug Bounty Program

July 15, 2024

Celebrating 10 years of GitHub's bug bounty program! Learn insights into bug bounty growth from a top program.

Feedback-Driven Interviewing at HackerOne

July 11, 2024

The Talent Acquisition team currently has a net promoter score (NPS) of 56%, while the...

Ethical hackers solving security problems

What HackerOne Customers Say About the Problems Hackers Solve

July 11, 2024

Learn why organizations work with ethical hackers, like preventing breaches, meeting regulatory compliance, and helping the security budget.

Offensive Security

Pentesting for Web Applications

July 10, 2024

Learn testing methodologies, common vulnerabilities, and best practices for pentesting web applications with PTaaS.

Security Compliance

Offensive Security

DORA: What You Need to Know

July 8, 2024

Learn about DORA, the new EU regulation for digital operational resilience, and how to meet the requirements with pentesting.

HackerOne customers working with ethical hackers

What HackerOne Customers Say About Remediating Vulnerabilities and Getting the Best Results From Hackers

July 4, 2024

Learn how HackerOne customers remediate vulnerabilities and get the best results and value from ethical hackers.

Introducing HackerOne's Hai API: Revolutionize Your Workflow Automation with AI

June 28, 2024

Learn about Hai API: designed specifically for customers seeking efficient interaction and automation capabilities.

Exposure Management

Common Ecommerce Vulnerabilities: Reflected XSS

June 27, 2024

With an example from Shopify, learn about the impact of Reflected XSS vulnerabilities in ecommerce.