HackerOne Blog

The latest from HackerOne

A Call for a New Cybersecurity Measurement Standard

February 26th, 2025

Cybersecurity initiatives provide financial value to organizations. Still, translating the benefits of cybersecurity into dollars and cents has long been a challenge for security teams.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Man with continuous security testing above his head

Exposure Management

Security Should Never Sleep: Adopting Continuous Testing for Evolving Threats

July 18th, 2023

Creating Continuous Attack Resistance In order to stay ahead of cybercriminals, businesses need to preemptively...

Exposure Management

Five Takeaways from Ohio Secretary of State's VDP Success Story

July 18th, 2023

Recently, Ohio Secretary of State Chief Information Security Officer Jillian Burner, and HackerOne Co-founder and...

Generative AI and Security: HackerOne's Predictions

July 12th, 2023

Offensive AI Will Outpace Defensive AI In the short term, and possibly indefinitely, we will...

Image showing ServiceNow, GitHub, and Snap logos, along with hacker handles for @rijalrojan and @man4bob.

Crowdsourced Security

Takeaways from a Conversation Between Hackers and Program Managers

July 5th, 2023

In our web event “Getting Vulnerable”, we brought together program managers Jill Moné-Corallo from GitHub...

Crowdsourced Security

Grammarly CISO Suha Can Discusses the Impact of Preemptive Security with HackerOne

June 14th, 2023

The allure of generative AI and the importance of the basics. While the advent of...

Seven Essential Components Of A Top-Tier Attack Surface Management Program

June 7th, 2023

1. Discover and Import Maintaining an up-to-date inventory of all your internet-facing assets is crucial...

Code Security

Audit the Security Posture of DevOps with HackerOne Code Security Audit

June 1st, 2023

Use Code Security Audit for DevOps DevOps teams may care about security, but it is...

A Year In HackerOne’s Bug Bounty Program

May 30th, 2023

Hackers Report The Most Vulnerabilities In 2022 To Keep The Platform Secure We looked at...

Governments Across The World Are Mandating Vulnerability Disclosure So Why Are Companies Sitting On Their Hands?

Security Compliance

Public Policy

GUEST BLOG: Governments Across The World Are Mandating Vulnerability Disclosure So Why Are Companies Sitting On Their Hands?

May 24th, 2023

The IoT Security Foundation’s fifth annual report into the state of vulnerability disclosure consumer Internet...