HackerOne Blog

The latest from HackerOne

A Call for a New Cybersecurity Measurement Standard

February 26th, 2025

Cybersecurity initiatives provide financial value to organizations. Still, translating the benefits of cybersecurity into dollars and cents has long been a challenge for security teams.

Read Now

All

Culture and Talent

Customer Stories

Engineering

From The CEO

News & Updates

Public Policy

Researcher Community

AI Safety & Security

Anthropic Expands Their Model Safety Bug Bounty Program

August 8th, 2024

Anthropic is expanding its private program on HackerOne!

Application Security

Vulnerability Management

A Visual Guide to Bug Bounty Success

August 7th, 2024

We've created a visual guide to planning, operating, and evaluating your bug bounty program for success.

child adult play with large bright light game

Tips for Parents Working from Home from HackerOne Employees

August 5th, 2024

At HackerOne, we've witnessed our parents craft impressive solutions to blend their professional and personal...

Vulnerability Management

Security Page Updates: Boosting Consistency & Transparency for Security Researchers and Customers

August 1st, 2024

HackerOne has launched new updates to program security pages that standardize policy fields and drive hacker engagement.

Gateway Internal Network Testing with HackerOne

Penetration Testing

Introducing HackerOne Gateway Internal Network Testing: Superior Security for Internal Networks

July 30th, 2024

Introducing Gateway Internal Network Testing (INT), powered by Cloudflare’s Zero Trust Network Access (ZTNA) technology.

Vulnerability Management

How a GraphQL Bug Resulted in Authentication Bypass

July 29th, 2024

Experienced security researchers explain how a GraphQL bug resulted in authentication bypass — and how to avoid it.

person with hackerone hoodie walking to lincoln memorial

Lessons from HackerOne’s First Recharge Week

July 26th, 2024

Our first-ever Recharge Week – July 1–5, 2024—aimed at giving most company employees a simultaneous...

Security Compliance

Vulnerability Management

Are You Ready for the New NIST Control Around Public Disclosure Programs?

July 25th, 2024

A new NIST control requires SaaS vendors to “establish a public reporting channel for receiving reports of vulnerabilities in organizational systems and system components.”

Security Compliance

Penetration Testing

HIPAA and Pentesting: What You Need to Know

July 24th, 2024

Learn how to maintain compliance with HIPAA security standards through pentesting.