HackerOne Blog
Read the HackerOne blog to learn strategies for strengthening your attack resistance with help from highly skilled ethical hackers. Improve your security profile and stay up to date on industry trends and emerging threats.
Get the latest news and insights beamed directly to you.
How Serialized Cookies Led to RCE on a WordPress Website
An Emerging Playbook for AI Red Teaming With HackerOne
What Is the Difference Between Pentesting and Bug Bounty?
HackerOne and the OWASP Top 10 for LLM: A Powerful Alliance for Secure AI
Interpret the 2023 GigaOm PTaaS Radar Report with HackerOne
Discover more with topics that matter to you most.
Generative AI
Generative Artificial Intelligence (GenAI) is ushering in a new era of how humans leverage technology. At HackerOne, we are combining human intelligence with artificial intelligence at scale to improve the efficiency of people and unlock entirely new capabilities.
Application Security
Learn how to prevent vulnerabilities in your applications. We cover current practices in application security, cloud security, API testing, and more.
Ethical Hacker
Ethical hackers, pentesters, and security researchers. We explain everything you need to know about them and how they can help your organization.
Company News
Stay informed of HackerOne partnerships, integrations, hackathon results, and other developments that keep HackerOne customers two steps ahead of cybercriminals.
Blogs From HackerOne's CEO
Read insights from HackerOne Chief Executive Officer Marten Mickos.
Penetration Testing
Follow the latest practices in penetration testing, including API testing, application testing, external networks, internet-facing infrastructure, and more.
Public Policy
HackerOne advocates for policies and standards around the world that support our customers, advance protections for the hacker community, and promote adoption of cybersecurity best practices.
Vulnerability Management
We cover everything in vulnerability management including discovery, prioritization, assessment, disclosure, and remediation.
Engineering Blog
Inside HackerOne Engineering: developing for a safer digital world.
![Wordpress RCE vulnerability](webp/rce%20blog%20header%402x.pnge095.webp)
How Serialized Cookies Led to RCE on a WordPress Website
![ISO 27001 and Pentest](webp/ptaas_blogimage10.jpgb172.webp)
ISO 27001 and Pentesting: What You Need to Know
![Mercado Libre merch during Ambassador World Cup](webp/awc%20blog%20header%402x.png2204.webp)
Join HackerOne’s Ambassador World Cup
![CREST-certified Pentest](webp/blogimages_763x462_blogimage_ptaas-2.pnga393.webp)
CREST and Pentesting: What You Need to Know
![Zoom Security Manager Roy Davis](webp/blog%20header_zoom%20als%20763x462%402x.png5a72.webp)
HackerOne and Zoom Select EverythingALS as the Latest Charity For #Hackforgood
The Ultimate Guide to Managing Ethical and Security Risks in AI
![AI Ebook](webp/ai%20ebook%20sticky%20ad_700x900.pnge337.webp)
![Marten Mickos - HackerOne](webp/marten%20mickos%20-%20hackerone_0.pngc626.webp)
HackerOne’s Next Stage of Growth
![Hacker discovering prompt injection vulnerability](webp/blog%20header_prompt%20injection%20763x462%402x.png8aac.webp)
How a Prompt Injection Vulnerability Led to Data Exfiltration
![Hai AI tool](webp/blogimages_763x462_blogimage_ai-4.png8911.webp)