Blog

Getting to know the HackerOne triage team with Zach Dando

If triaging vulnerability reports was a martial art, Zach Dando would be sensei master. Zach runs the triage team at HackerOne and we recently sent some questions his way to glean insight into how he has HackerOne’s Security Analysts clicking on all cylinders.  

Qualcomm's Alex Gantman on Bug Bounties

From smart refrigerators in your kitchen to cardiac monitors in a hospital, Qualcomm’s processors, modems, and other wireless technologies are powering the world of connected devices. But as the number of those devices continues to explode—to as many as 20 billion by 2020—the focus on security becomes more prominent.

GitHub Embraces Hacker-Powered Security To Protect 55 Million Projects

You’ve probably heard of GitHub, but you might not know they support more than 20 million people learning, sharing, and working together on more than 55 million projects. Yeah, that’s a lot...and a lot of responsibility on GitHub’s part to ensure the safety and security of their customers’ data.

It’s Phab-tastic! HackerOne integrates with Phabricator

The $30,000 Gem: Part 1

Opening your database to the world is a scary thought! But that’s exactly what we wanted to do by implementing a GraphQL endpoint. Feeling stuck with the classic REST-ish JSON API, there were a multitude of problems that we were looking to get rid of.

GitLab's Brian Neel on Secure Software Development and Bug Bounties

Brian Neel, GitLab’s Security Lead, looks at how the software security apparatus has grown over time, and how hacker-powered security has become a critical component for GitLab and other companies like them.

Put Your Security to the Test: Introducing HackerOne Challenge

Today we launch a new product, designed for every security team that runs periodic testing of web applications.

Q&A with WordPress Security Team Lead, Aaron Campbell

Learn more about WordPress and their approach to bug bounties and security from Aaron Campbell, Security Team Lead at WordPress.

Register Now to Hack the US Air Force

Hackers, do you have what it takes to hack the U.S. Air Force? Register now to participate in the Department of Defense's largest bug bounty challenge to date.

The Visual Guide to Bug Bounty Success

We have created the most comprehensive, educational, practical, and valuable resource ever about the ins and outs of running a successful bug bounty program and now we've turned it into a simple one-page graphic.