As mentioned in our last post of this series, when hackers provide value, they appreciate thoughtful engagement with the organization they’re helping. You know what…
The Hacker-Powered Security Report examines the largest dataset of more than 800 hacker-powered security programs, compiles learnings from application security practitioners and the hackers who…
When someone finds a potential issue with your website, hardware, or software, you want to be notified. Having a vulnerability known to others, but unknown…
It took just under a minute for hackers to report the first security vulnerability to the U.S. Air Force. Twenty-five days later when the Hack…
Vulnerability disclosure and hacker-powered security cannot be ignored. In July 2017, the Dept of Justice issued a framework for organizations looking to implement vulnerability disclosure…
Last week, I made a mini Capture The Flag (CTF) about a criminal who changed Barry’s password. The challenge was to come up with the…
Everyone should be focused on the security of their data and systems, from the mom-and-pop store down the street to the biggest multinational enterprises with…
What’s hiding in the shadows? It’s a well understood reality that unmanaged IT assets tend to be unmonitored IT assets, and that both introduce risk.…
Have you ever watched the Las Vegas sunrise after 12-hours of hacking through the night? The 50-hackers at H1-702 have. Hacking achievement, unlocked. H1-702 was…
For many HackerOne customers, Slack is the place where team collaboration happens and where work gets done. Originally, we built our integration to maximize information…
Hacktivity is one of the most popular pages on hackerone.com. And for good reason as it’s a veritable treasure trove of learning for hackers and…
Over 50,000 vulnerabilities found and fixed. Over 100,000 hackers strong in the HackerOne community. Over $20 million paid in bounties to those who help make…
