What's in a Name?

While there are many interpretations of the word "hacker," we choose to pay homage to the original MIT hackers by using the term in our company name. We favor their early definition of a hacker: "one who enjoys the intellectual challenge of creatively overcoming limitations."


https://www.hackerone.com/ethical-hacker/whats-name

The Wolves of Vuln Street - The First System Dynamics Model of the 0day Market

HackerOne has been working with economics and policy researchers from MIT and Harvard to study the economic forces behind the 0day market. Here's what they found.


https://www.hackerone.com/vulnerability-...day-market

Legally Blind and Deaf - How Computer Crime Laws Silence Helpful Hackers

A world wide war is being waged in which the most able-bodied soldiers are being discouraged from enlisting. It is an information security war, and hackers are the troops and the weapon designers that have the skills to shape our collective future, for good or for ill.


https://www.hackerone.com/ethical-hacker...ul-hackers

Where's that Security@?

HackerOne is launching the Directory: a community-curated resource for identifying the best way to contact an organization's security team.


https://www.hackerone.com/company-news/wheres-security

Improving Signal Over 10,000 Bugs

HackerOne reached the milestone of 10,000 bugs fixed on the platform, and we want to take this opportunity to share some interesting data behind how we have tackled the challenge of improving signal on the platform.


https://www.hackerone.com/ethical-hacker...10000-bugs

6 Tools Slated To Come Out Of Black Hat

In anticipation of the show, here at Within Security we've scoped out some of the top tools slated for release by researchers scheduled to talk at Mandalay.


https://www.hackerone.com/application-se...-black-hat

Security Leads Share Bug Bounty Program Tips

HackerOne hosted a security panel, lead by Magoo, on bug bounty programs and we want to share some key takeaways with you.


https://www.hackerone.com/ethical-hacker...ogram-tips

6 Reasons Your Security Recruiting Sucks

As we discussed in our previous blog, the security skills shortage may not be quite as real as some industry reports claim it to be. But that doesn't mean it's easy to recruit and retain talented professionals into the industry. It just means many organizations are blaming market dynamics for their own shortcomings.


https://www.hackerone.com/ethical-hacker...ting-sucks

Measuring Success in Vulnerability Disclosure

HackerOne introduces the HackerOne Success Index, a method to measure the effectiveness of HackerOne-powered vulnerability disclosure programs.


https://www.hackerone.com/vulnerability-...disclosure

411 for Hackers: Disclosure Assistance

HackerOne introduces Disclosure Assistance to help hackers reach organizations that don't have official vulnerability reporting processes.


https://www.hackerone.com/vulnerability-...assistance