HackerOne Blog

The latest from HackerOne

A Call for a New Cybersecurity Measurement Standard

February 26th, 2025

Cybersecurity initiatives provide financial value to organizations. Still, translating the benefits of cybersecurity into dollars and cents has long been a challenge for security teams.

Read Now

All

Culture and Talent

Customer Stories

Engineering

From The CEO

News & Updates

Public Policy

Researcher Community

Vulnerability Management

How Inadequate Authentication Logic Led to an MFA Bypass and Account Takeover

November 20th, 2024

Learn how inadequate authentication logic led to an MFA bypass, plus 11 authentication best practices to prevent vulnerabilities like these.

How HackerOne Employees Stay Connected and Have Fun

November 19th, 2024

This year, we launched new initiatives designed to bring people together in fun and innovative...

Vulnerability Management

How REI Strengthens Security with HackerOne’s Global Security Researcher Community

November 18th, 2024

REI's senior application security engineer discusses their program success, evolving goals, and the value of the security researcher community.

Flexible Data Retrieval at Scale with HAQL

November 15th, 2024

HAQL: HackerOne's simplified query interface for writing performant aggregate queries on tables modeled purposefully for data analysis.

AI Safety & Security

AI in SecOps: How AI is Impacting Red and Blue Team Operations

November 15th, 2024

View survey results and analysis of how AI in SecOps is impacting red and blue team operations.

HackerOne’s Fall Day of Service

November 13th, 2024

Employees had the chance to connect over shared goals and values, fostering stronger relationships beyond...

Vulnerability Management

How HackerOne Disproved an MFA Bypass With a Spot Check

November 13th, 2024

Read how HackerOne's internal security team disproved an alleged MFA bypass with a targeted Spot Check.

Unlocking Engagement with Employee Feedback

November 6th, 2024

Since 2018, HackerOne has maintained an employee engagement survey participation rate of over 80%, with...

Ethical hackers fixing improper access control vulnerabilities

Vulnerability Management

How an Improper Access Control Vulnerability Led to Account Theft in One Click

November 6th, 2024

Let’s look more closely at the improper access control vulnerability type — what it is, how it’s used, and how to remediate it.