Seven Essential Components Of A Top-Tier Attack Surface Management Program




https://www.hackerone.com/seven-essentia...nt-program

Grammarly CISO Suha Can Discusses the Impact of Preemptive Security with HackerOne

Suha Can, the CISO of Grammarly, recently joined HackerOne’s CTO & Co-founder, Alex Rice, for a discussion on user trust, the benefits of Grammarly’s bug bounty program, and the advantages of preemptive security measures.


https://www.hackerone.com/customer-stori...e-security

Takeaways from a Conversation Between Hackers and Program Managers

In recent years, HackerOne has brought hackers and customers together more frequently. Bug bounty and pentests are where these two parts of the HackerOne community have historically met, but fostering open conversations outside of paid engagements has further reinforced the sense of community and collaboration that HackerOne embodies.


https://www.hackerone.com/best-practices...m-managers

Generative AI and Security: HackerOne's Predictions

GAI capabilities will soon be table stakes for any software company as their customers will simply expect it. Those who do not take advantage of this technological evolution will decline into irrelevancy and be replaced by better and more productive alternatives. A world where Generative AI is ubiquitous will soon be here. What does that mean for security? We have two main predictions.


https://www.hackerone.com/thought-leader...redictions

Five Takeaways from Ohio Secretary of State's VDP Success Story

"Cybersecurity is on everyone’s radar, but not everyone knows all the specific details to ensure protection. We know bad actors are constantly looking for cracks in our defenses and applications. That's why it's so important for us to work with ethical hackers. They know what vulnerabilities the bad actors are looking for, and they know how to find them before the bad guys can."
- Jillian Burner, CISO, Ohio Secretary of State


https://www.hackerone.com/vulnerability-...cess-story

Security Should Never Sleep: Adopting Continuous Testing for Evolving Threats

Compounding security debt from daily new releases creates serious challenges for security organizations — especially considering the scarcity of skilled personnel. Point-in-time security measures and an overreliance on automation and AI create a false sense of security that often leaves the door open for attackers.


https://www.hackerone.com/vulnerability-...ng-threats

Zoom and Salesforce: The Role of Hackers in Addressing Security Challenges

“You can’t find everything, and it’s crucial to leverage the best talent where you can find it,” says Michael Adams, Chief Information Security Officer at Zoom.


https://www.hackerone.com/vulnerability-...al-hackers

Amazon's Security Researcher Collaboration: Highlights from H1-213

“At Amazon, protecting our customers’ information is our top priority. Part of those efforts includes our bug bounty program through HackerOne, which allows participating researchers to submit findings directly to the company. We work with researchers across the security industry that reach out about potential issues that may impact our customers, and we take steps to investigate and fix them. Events like H1-213 provide our security teams with the unique opportunity to engage a diverse group of ethical, independent researchers.”
- Travis Lee, Senior Manager, Offensive Security


https://www.hackerone.com/live-hacking-e...hts-h1-213

Strengthening the SDLC with Security Advisory Services (SAS)

We see untapped potential in how customers use our HackerOne solutions every day, which inspired the creation of our latest offering: HackerOne Security Advisory Services (SAS).


https://www.hackerone.com/vulnerability-...vices-sdlc

Company Update




https://www.hackerone.com/ceo/company-update