HackerOne

2x Bug Bounty Rewards on Critical Identity findings. Three weeks starting next week! Starting June 8th, Shopify is paying bonus multipliers on any vulnerability found related to Authentication and Account Takeover: 🔴 Critical: 2x 🟠 High: 1.5x 🟡 Medium: 1.25x Whether you're a seasoned researcher, eyeing Shopify's attack surface for the first time, or looking to kick off your bug bounty career, this is your chance. These systems are one of the most complex and rewarding targets we have. Open to every researcher on our HackerOne program, new and existing. If you're not on the program yet, sign up this week and start your recon before June 8th: https://lnkd.in/gUWd3uBr

HackerOne H1 Platform: agentic continuous threat exposure management that closes the discovery to remediation gap. https://lnkd.in/dkaf2yYR

KOHO transformed their continuous testing program from reactive to continuously validated. By combining automation, Hai-powered workflows, and better alignment between security and engineering, the team reduced triage time from 100+ hours to ~22 hours, leading to 4.5x faster validation cycles. Take it from Scott, who led KOHO’s transformation: “You can’t just force quality, you have to build it through relationships and process.” Read the case study. 👇 https://bit.ly/42O30W4

What can you expect today at #Infosec2026? 👕 T-shirt drops at 10AM and 4PM -- stop by the booth for limited edition swag! 🎤 Laurie Mercer speaking on "Stop the AI Slop! From Noise to Validated Risk" at the Technology Showcase at 1:20PM 💬 Conversations on how security leaders are using continuous testing to keep up with the expanding threat landscape.

🎁 🎁 Don't miss HackerOne's T-shirt drop at #Infosec2026! 🎁 🎁 At 10AM and 4PM every day at Infosec we'll be giving away our limited edition tees Make sure you get yours 🤩

#Infosec2026 let’s goooooo! We're ready to talk all things continuous security testing, AI-powered validation, and closing the find-to-fix gap, fast. Security leaders are telling us the same thing: finding vulnerabilities isn't the problem anymore. Knowing which ones are actually exploitable, and fixing them before attackers act, is. Come have that conversation with us today. 📍 Booth F142 Today until 4 June 🕐 We're here all day, no appointment needed. Whether you're dealing with a growing remediation backlog or trying to make sense of AI-generated findings, we'd love to show you what a validation-first approach looks like in practice. See you on the floor. 😎

The countdown is on! Last week, we told you we’d be announcing something from HackerOne on June 2. In 24 hours, we’ll reveal what we’ve been up to—stay tuned!