Edited on 12/11/2015 to reflect the latest Reputation implementation. One of the primary challenges when running a vulnerability coordination program is distinguishing signal from noise.…
A Look at 2014, Recommendations and New Year’s Resolutions for Security in 2015 and Beyond With the end of 2014 dashing to a close and…
Last Friday, on my way home from 31c3, a funny thing happened on my way through Charles de Gaulle airport in Paris: I was required…
According to a Mar-2022 API survey by Gartner, 98% of organizations use or are planning to use internal APIs – up from 88% in 2019.…
Many security professionals, hackers, lawyers, law enforcement, and members of the media are keenly interested in the White House’s proposed changes to laws affecting Internet…
While there are many interpretations of the word “hacker,” we choose to pay homage to the original MIT hackers by using the term in our…
Research Highlights HackerOne has been working with economics and policy researchers from MIT and Harvard to study the economic forces behind the 0day market. Here’s…
A world wide war is being waged in which the most able-bodied soldiers are being discouraged from enlisting. It is an information security war, and…
All technology contains bugs. These bugs frequently have security implications that may be exploited by criminals, but are more often discovered by friendly parties —…
On July 2nd, 2015, HackerOne reached 10,000 valid security vulnerabilities resolved on our platform – that’s 10,000 fewer ways for attackers to exploit users, steal…
By Ericka Chickowski Security summer camp is upon us as Black Hat is just a few days away. The infosec community was busy with research…
Yesterday, I ran an invitational security panel featuring security leads from large and small companies with varying levels of vulnerability disclosure programs. We curated the…
