HackerOne

REI’s senior application security engineer discusses their program success, evolving goals, and the value of the security researcher community.

HAQL: HackerOne’s simplified query interface for writing performant aggregate queries on tables modeled purposefully for data analysis.

View survey results and analysis of how AI in SecOps is impacting red and blue team operations.

Read how HackerOne’s internal security team disproved an alleged MFA bypass with a targeted Spot Check.

Improper access control is the #3 most common security vulnerability. Learn what improper access control is, its impacts, and how to prevent it.

Information disclosure is the #2 most common security vulnerability. Learn what information disclosure is, its impacts, and how to prevent it.

Cross-site scripting (XSS) is the number one most common security vulnerability. Learn what XSS is, its impacts, and how to prevent it.

Learn about the impact, severity, and a real-world example of business logic vulnerabilities.

Explore who is and should be accountable for AI risk within organizations and how to empower them to take this significant responsibility.

Learn how security researchers are securing election technology though vulnerability testing and disclosure.

Learn about HackerOne Benchmarks, a set of features designed to provide insights for optimizing your security program’s performance.

Learn the ins and outs of AWS security configuration testing and why community-driven PTaaS is the best method.

Cryptographic failures: what are they and why are they considered so concerning by the OWASP Top 10?

Use HackerOne’s Global Vulnerability Policy Map to keep up with evolving VDP mandates and recommendations.

Learn about the EU Council’s Cyber Resilience Act, where we’re headed, and what we believe should happen next.

Learn how HackerOne’s AI Risk Readiness Self-Assessment Tool helps measure your AI security and compliance preparedness.

Learn how to optimize internal network pentesting through community-driven pentesting as a service (PTaaS).

Learn the ins and outs of IDOR vulnerabilities and how one exploitation led to malicious user profile modification.

Learn the ins and outs of broken access control vulnerabilities and how to find them in your security research.

Everything you need to know about the next NIS2 Directive, what it means for you, and how to be compliant.

Written by experienced security researcher EdOverflow, this blog provides an understanding of subdomain configurations with current resources and tools.

Hai streamlines the SDLC with the tools to maintain consistency, automate tasks, and improve overall efficiency.

Hai, HackerOne’s AI co-pilot, streamlines remediation efforts and accelerates the find-to-fix process.

Learn why more organizations are including their bug bounty programs in S-1 filings and other corporate disclosures.