HackerOne

This blog will break down the NIS2 Directive drawing information from the original directive briefing published by the European Parliament and explain how organizations can prepare for compliance,...

If you weren’t lucky enough to catch us at a roadshow event, you’ll be delighted to know you can catch us again in 2025 with the next series!The 2024 Security@ world tour traveled to eight...

The injection classification is broad in scope and includes attack vectors such as:cross-site scripting (XSS)SQL injection (SQLi)carriage return/line feed injection (CRLF)server-side template...

Many Facets, One GoalA common trope in cybersecurity is "don't roll your own auth." There's a reason for this: implementing authentication is deceptively difficult. Many of the requirements for...

This year, we launched new initiatives designed to bring people together in fun and innovative ways, including playing online games, monthly global fitness challenges, and unique team-building...

Q: Please introduce yourself. Tell us what you do at REI and why cybersecurity is important to REI.A: I'm Isaiah Grigsby, a senior application security engineer. I lead our vulnerability...

What is HAQL?Back in 2022, we were faced with a challenge: we wanted to build useful, actionable dashboards for our customers, and we wanted to build them fast. We had the data, we had the...

Integrating AI into SOCsThe integration of AI into security operations centers (SOCs) and its impact on the workforce are pivotal aspects of successful AI adoption and trust building. According to...

Employees had the chance to connect over shared goals and values, fostering stronger relationships beyond the workplace. This event generated 13 projects around the U.S. and the Netherlands....

What Is a Spot Check?A Spot Check is a powerful tool for security teams to do a tightly focused and scoped human-powered assessment with security researchers. Available as part of HackerOne Bounty...

Since 2018, HackerOne has maintained an employee engagement survey participation rate of over 80%, with half of the surveys achieving 90% or more participation. The executive leaders read every...

It sounds straightforward enough, but business logic vulnerabilities can result in an array of serious security issues, such as unauthorized access, bypassing rate limits, or in the case of a...

In this blog, we’ll explore who is and should be accountable for AI risk within organizations and how to empower them to take this significant responsibility. AI Security RisksWhat does “AI risk”...

Security researchers and election technology manufacturers at the Election Security Research Forum (ESRF). The EventIn preparation for the election season, HackerOne planned and executed a...

Without clear comparisons and long-term visibility, it’s challenging to identify areas for improvement and make informed, data-driven decisions. That’s why we’re excited to introduce...

In fact, the Cloud Security Alliance’s Top Threats to Cloud Computing 2024 Report ranks the following concerns as the top three:Misconfiguration and inadequate change controlIdentity and Access...

What Is Cryptography?Cryptography is the practice and study of techniques for securing communication and information by transforming it into a format that is unreadable to unauthorized users. When...

The file upload vulnerability type is as broad in scope as the number of different file types. These vulnerabilities are an ever-present security concern. While the underlying mechanics of how the...

To help organizations keep up with the shifting landscape of VDP mandates and recommendations, HackerOne has developed the Global Vulnerability Policy Map, an interactive map-based tracker. Users...