Public Policy
Takeaways from the Dismissal of the Government’s Case Against the SolarWinds CISO
The government’s case against the SolarWinds CISO has been dismissed. What does this development mean?
Public Policy
Takeaways from the Dismissal of the Government’s Case Against the SolarWinds CISO
August 15th, 2024
The government’s case against the SolarWinds CISO has been dismissed. What does this development mean?
Security Compliance,
Public Policy,
Vulnerability Disclosure
Are You Ready for the New NIST Control Around Public Disclosure Programs?
July 25th, 2024
A new NIST control requires SaaS vendors to “establish a public reporting channel for receiving reports of vulnerabilities in organizational systems and system components.”
Public Policy
What You Need to Know About the EU’s Cyber Resilience Act
May 22nd, 2024
The EU is adopting the Cyber Resilience Act, which will bring pivotal changes to product cybersecurity in Europe, the United States, and globally.
Public Policy
Vulnerability Disclosure Policy Requirements for UK Smart Products
March 26th, 2024
New security regulations for connected devices and related guidance enter into force in the UK at the end of April.
Public Policy
The White House Should Prioritize Cybersecurity in its Budget
March 8th, 2024
The White House will release its budget proposal for 2025, and it's time to create and fund initiatives that shift the advantage away from attackers.
Get the latest news and insights beamed directly to you
Security Compliance,
Public Policy
How Coordinated Vulnerability Disclosure Can Boost Election Integrity and Public Perception
January 4th, 2024
A panel of experts in election security and Coordinated Vulnerability Disclosure (CVD) convened to share advice and best practices with a small group of U.S. election officials.
Generative AI,
Thought Leadership,
Public Policy
Unlocking Trust in AI: The Ethical Hacker's Approach to AI Red Teaming
December 19th, 2023
HackerOne offers robust AI Red Teaming services that help organizations bolster the security, fairness, and reliability of their AI deployments.
Security Compliance,
Public Policy
How VDP Aligns With Zero Trust
November 20th, 2023
A core component of Zero Trust is enabling external testers to validate the continuous security of external-facing assets, like through a VDP.
Policy Comments
When regulators have questions about policies and standards around the world, HackerOne has the answers.
- June 28, 2024: HackerOne Comments on Implementing the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)
- May 29, 2024: HackerOne Applauds Senator Warner’s Support for Legal Protection of AI Red Teaming
- April 29, 2024: HackerOne Response to OMB AI RFI
- April 16, 2024: Request for DOJ to Develop a Charging Policy under the CFAA to Protect Independent AI
Trustworthiness Research - March 18, 2024: Comment in Support of a DMCA Exemption for GenAI Research
- February 5, 2024: HackerOne NY Hospital Cybersecurity Requirements Comments
- February 2, 2024: Comments on NIST RFI on Artificial Intelligence Executive Order
- February 2, 2024: Comments on Cybersecurity for Unclassified Federal Information Systems (FAR Case 2021-019)
- February 2, 2024: Comments on Federal Contractor Cybersecurity (FAR Case 2021-017)
- April 6, 2023: Response to UK Computer Misuse Act Consultation
- June 23, 2023: Response to CISA Secure Software Attestation Form
- July 12, 2023: Response to NIST 800-171r3 Draft
- November 6, 2023: Comments to NIST CSF 2.0 Public Draft
- December 21, 2023: Comments on DMCA Section 1201 Generative AI Research
- March 19, 2022: Comments on UK DCMS Cyber Profession Pathway
- July 7, 2022: Comments on FDA Cybersecurity in Medical Devices
- December 14, 2022: Comments on Cyber Requirements for Federal Insurance
- June 08, 2021: Response to UK Computer Misuse Act Call for Information
- September 3, 2020: Proposals for Regulating Consumer Smart Product Cyber Security
- September 10, 2020: Comments on NIST SP 800-53B
External Press
New hacker advocacy group seeks to protect work of security researchers
Cyber regulations can make our nation safer
The Role of Regulation in Comprehensive Cybersecurity
A new hackathon is helping to make elections more secure
Cybersecurity firms to launch legal support fund, advocacy group for ethical hackers
CISA releases HBOM framework for supply chain risk management