Hackers Wanted: Hack the Army & Pentagon!
Hackers we have big news from our partners at the Pentagon! The DoD is announcing their Vulnerability Disclosure Policy and registration is open to sign…
Category: Mix
Show Us Your Mad Skillz! Introducing Hacker Skills
We’re going to come right out and say it: you hackers are talented! The diverse set of skills in our community is evidenced by the…
Hiring Hackers| How Organizations Can Benefit From Hacker Curiosity
What is one trait that all hackers possess? Answer: Curiosity! Alex Rice, HackerOne Co-Founder and CTO recently spoke at Wired Security 2016. He led off…
Nintendo Bug Bounty – Nintendo’s Brand New Vulnerability Program
Nintendo is offering an incentive to the world’s finest researchers to find and report security vulnerabilities for the Nintendo 3DS family of handheld game systems.…
How much is a bug worth? Introducing Bounty Statistics
Ever wondered how much you should reward a hacker? Too little and you risk offense, too much and you set the wrong expectations. What do…
Hacker Herding – Bug Bounty Tips from Sky Betting & Gaming
UK-based Sky Betting & Gaming recently launched their own bug bounty program and shared some tips in a blog post: Hacker Herding – Ten Lessons…
Celebrating Alongside Yelp: Reaching The 100 Day Milestone of Their Public Bug Bounty Program
Approximately 100 days ago, Yelp flipped the switch from being a private bug bounty program on HackerOne, to a public program. To commemorate, Yelp Software…
Together We Hit Harder – HackerOne Company Values
HackerOne’s mission is to empower the world to build a safer internet. All of us HackerOnies are driven by a passion for our mission, and…
VR Hacking| Concerns Regarding the Rise of Virtual Reality
2017 may be the year Virtual Reality and Augmented reality truly go mainstream. But is it airtight from a security perspective? Well, the immediate answer…
Advanced Workflows with Inbox Views
By default, HackerOne offers a standard vulnerability disclosure workflow that supports most security teams out there. But one size doesn’t fit all. We all like…
Vulnerability Reporting – Lack of Corporate Security Reporting
Recently, McDonald’s customers were placed at risk unnecessarily due to the lack of a clear vulnerability disclosure process. What if they had had a “security@”…
Q&A With PortSwigger’s James Kettle: Bug Bounties, Exploit Stories, and More!
As 2016 came to a slow-burning close, the gang at PortSwigger debuted its public bug bounty program on HackerOne. We’re super excited to be partnering…