Skip to main content

Application Security

Learn how to prevent vulnerabilities in your applications. We cover current practices in application security, cloud security, API testing, and more.

Customer Stories, Bounty, Application Security, Best Practices

Robinhood Goes Long on Bug Bounty: Q&A with Ian Carroll and @ashwarya

Seven years of bug bounty, 21-hour average time to bounty, 130 hackers thanked, and hackers on both sides of the program: Robinhood’s Ian Carroll...

Application Security, Customer Stories, Bounty

GitLab's Brian Neel on Secure Software Development and Bug Bounties

Brian Neel, GitLab’s Security Lead, looks at how the software security apparatus has grown over time, and how...

Application Security, Company Resources, Best Practices

The Visual Guide to Bug Bounty Success

We have created the most comprehensive, educational, practical, and valuable resource ever about the ins and...

Application Security, From The CEO, Company Resources

Bug Bounty Programs — Why Should I Care?

Every digital company has software vulnerabilities, and they get terribly expensive in case of a breach...

Application Security, New Features

Bug fixes just got a little easier; HackerOne introduces bi-directional JIRA integration

It’s now possible to view updates on JIRA issues right inside your HackerOne Reports. The two-way integration...

Application Security, Best Practices, Company Resources

Bug Bounty Field Manual: The Definitive Guide for Planning, Launching, and Operating a Successful Bug Bounty Program

Writing the Bug Bounty Field Manual was a herculean task. Just ask Adam Bacchus, the distinguished author of...

Application Security, New Program Launch

Rockstar Games Launches Public HackerOne Bug Bounty Program

As the creators of the Grand Theft Auto series, Red Dead Redemption and many more, Rockstar Games knows that...

Application Security

Flexport leverages bug bounty programs to secure their customers highly confidential shipping data

Uber of the oceans, Flexport, leverages bug bounty programs to secure their customers highly confidential...

Application Security, Company Resources

Q&A With PortSwigger's James Kettle: Bug Bounties, Exploit Stories, and More!

We sat down with James Kettle, PortSwigger’s Head of Research, to get the scoop on their public bounty program...