Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW
  • CPE

HackerOne: 2.1M Security Researchers Walk Into a Conference Booth…

Truth in IT
05/05/2025
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


Hi Mike Matchett with Small World Big Data. We are here at RSAC 2025 live. There's 25,000 people here. We hear lots of people going on at the show. Lots of themes from, uh, vulnerability to new features to AI that were going on here. But we are here right now standing with HackerOne . I've got Paul. Paul, welcome. Hey, thank you very much. Nice to be here. Uh, let's talk about HackerOne, then. Just because we're here, uh, you guys are, uh, kind of a leader in security. Tell us a little bit about what that means and what more specifically you do. Yeah, absolutely. So we absolutely are a leader in security. Uh, we have the largest community of ethical hackers, about 2.1 million and counting. And what we do is we utilize this amazing skill set that we have in this diverse bench of ethical hackers to actively hack on assets and find vulnerabilities before the bad guys do. Uh, so we're most known for our bug bounty program, and we're actually the leader in that space. All right. Are people motivated to do this just out of the kindness of their hearts? Are they? I mean, you mentioned a bounty. Or is this something that people find as a challenge mentally? What's going on with that? That hacker mindset? It is a challenge mentally, but mainly organizations are coming to us because they're terrified that they're going to suffer a breach, right. And in some instances they have suffered a breach. So we can use this ethical hacking community to find those vulnerabilities before the bad guys do. The ethical hackers that participate on our platform actually receive a bounty or a small payment for finding that? And it gives them a chance to form a really great relationship with that, with that community and the organization as well. We do have an offering as well, VDP Vulnerability Disclosure Program. It's a see something, say something program. So in that instance, we just want to be the mechanism for ethical researchers to be able to report to organizations. They don't get paid for that, but they can still get really, really great findings from the from the environment. All right. We're looking around at this show with all these people coming by and everything. How are you recruiting here? Are you trying to generate interest? What goes on here for you guys? A little bit of a a little bit of b yeah. So we've had some of our ethical research community come by. Our hackers, if you will. Um, sometimes they want to just hear about our developments, our advancements. You know, what else can the platform do for them? You know, a lot of them earn a really great living on the platform. We've also had organizations, current customers and prospects come by wanting to know what's new at HackerOne . You know, how can you help me with my AI chatbot? You know, I'm terrified of being breached. So it's really great to see the excitement here. And so far, the engagement's been really, really great at the booth. Yeah. Speaking of sort of the trends, AI is obviously a big trend here in adoption. So how is that affecting your community? Are you seeing more people using AI in ethically, unethically or more people using AI for good? How is that working out? Well, on our side, we're absolutely seeing people use AI for good, right? And hacker wants no stranger to that either. We've developed an internal AI chatbot named High High for HackerOne AI that's for our organizations, and it can help automate a lot of the typically manual processes in the platform. And we really want to make the the different offerings that we have as easy as possible for the organizations to consume. So HackerOne is proactively using AI to provide benefit to the organizations that are using us. We are also seeing ethical researchers build their own tools to do things like discover vulnerabilities. And obviously AI is just a huge tool for that as well. So it's it's happening on both sides of the table. Really good race. If you wanted to get one message out to everyone here at the show, sort of and say, like, if you had the big microphone, what would you tell them? I would tell them to come by the HackerOne booth, talk to our wonderful team up front, grab a cup of coffee, come back here and see a demo, and learn more about what ethical hacking can do for you. And we can talk you through all of these programs, and we can help you figure out how to make your environment much, much safer. All right. Well, thank you so much, Paul. Thank you for talking to us today. Appreciate it. Thank you so much. All right. Check it out. And what's the website again? HackerOne .com. HackerOne .com. Take care.
HackerOne taps into a 2.1 million-strong army of security researchers to identify vulnerabilities before bad actors strike. They lead the bug bounty world and also run VDP programs for zero-pay disclosures. AI is both a tool and a threat, and HackerOne embraces both sides with their internal HackerOne AI security agent, Hai. Real hackers. Real results. Real caffeine.
Categories:
  • » Cybersecurity » Data Security
  • » Cybersecurity » Application Security
  • » Small World Big Data
  • » Cybersecurity
  • » Cybersecurity » Zero Trust
Channels:
  • Mike Matchett: Small World Big Data
News:
Events:
Tags:
  • rsac2025
  • cybersecurity
  • matchett
  • hackerone
  • bug
  • bounty
  • ethical
  • hacking
  • vdp
  • crowdsourced
  • security
  • penetration
  • testing
  • ai
  • threats
  • responsible
  • disclosure
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: HackerOne: 2.1M Security Researchers Walk Into a Conference Booth…

              How secure is your Microsoft enterprise? Under 5 minutes, earn $10 in TruthPoints.

              View CPE Certificates

              Upcoming 360 View Events

              • Nov
                19

                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Dec
                  09

                  Beyond Continuous Compliance: Getting Ready to Detect, Recalculate, and Adapt

                  12/09/202601:00 PM ET
                  More events

                  Industry Events (Sponsor Hosted)

                  • Nov
                    18

                    Hands-On Workshop: Connecting On-Prem Data to Databricks via MinIO AIStor (International)

                    11/18/202608:00 AM ET
                    • Nov
                      19

                      Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

                      11/19/202601:00 PM ET
                      • Nov
                        19

                        AI Agent Showdown: Discover What Muse, Dots, and Duet Bring to Your Website

                        11/19/202601:00 PM ET
                        • Dec
                          02

                          Skylight en acción: salvaguardando la IA más allá del usuario.

                          12/02/202604:00 AM ET
                          • Dec
                            03

                            CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era

                            12/03/202601:00 PM ET
                            More events

                            Upcoming Webinar Calendar

                            • 11/18/2026
                              08:00 AM
                              11/18/2026
                              Hands-On Workshop: Connecting On-Prem Data to Databricks via MinIO AIStor (International)
                              https://www.truthinit.com/index.php/channel/2194/hands-on-workshop-connecting-on-prem-data-to-databricks-via-minio-aistor-international/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection
                              https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              AI Agent Showdown: Discover What Muse, Dots, and Duet Bring to Your Website
                              https://www.truthinit.com/index.php/channel/2228/ai-agent-showdown-discover-what-muse-dots-and-duet-bring-to-your-website/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                              https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                            • 12/02/2026
                              04:00 AM
                              12/02/2026
                              Skylight en acción: salvaguardando la IA más allá del usuario.
                              https://www.truthinit.com/index.php/channel/2147/skylight-en-acción-salvaguardando-la-ia-más-allá-del-usuario/
                            • 12/03/2026
                              01:00 PM
                              12/03/2026
                              CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era
                              https://www.truthinit.com/index.php/channel/2231/ciso-insights-steering-cybersecurity-strategies-in-an-ai-driven-era/
                            • 12/09/2026
                              01:00 PM
                              12/09/2026
                              Beyond Continuous Compliance: Getting Ready to Detect, Recalculate, and Adapt
                              https://www.truthinit.com/index.php/channel/2250/beyond-continuous-compliance-getting-ready-to-detect-recalculate-and-adapt/
                            • 12/09/2026
                              02:00 PM
                              12/09/2026
                              Strategies for Safeguarding Endpoints in the Agentic Era with Cyera
                              https://www.truthinit.com/index.php/channel/2256/strategies-for-safeguarding-endpoints-in-the-agentic-era-with-cyera/
                            • 12/17/2026
                              01:00 PM
                              12/17/2026
                              Truth in IT Alpha Test: New chat system
                              https://www.truthinit.com/index.php/channel/2265/truth-in-it-alpha-test-new-chat-system/
                            • 01/19/2027
                              04:00 AM
                              01/19/2027
                              Skylight in Aktion: Gewährleisten Sie KI-Schutz über den Benutzer hinaus
                              https://www.truthinit.com/index.php/channel/2176/skylight-in-aktion-gewährleisten-sie-ki-schutz-über-den-benutzer-hinaus/
                            • 01/19/2027
                              02:00 PM
                              01/19/2027
                              HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.
                              https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
                            • 03/18/2027
                              01:00 PM
                              03/18/2027
                              Securing Access for People, Partners and AI Agents
                              https://www.truthinit.com/index.php/channel/2251/securing-access-for-people-partners-and-ai-agents/
                            • 06/17/2027
                              01:00 PM
                              06/17/2027
                              Stop the Leak: Data Loss Prevention for the AI Era
                              https://www.truthinit.com/index.php/channel/955/360view-stop-the-leak-data-loss-prevention-for-the-ai-era/
                            • 08/19/2027
                              01:00 PM
                              08/19/2027
                              Who Has Access to What...and Should They?
                              https://www.truthinit.com/index.php/channel/2252/who-has-access-to-what-and-should-they/
                            • 10/21/2027
                              01:00 PM
                              10/21/2027
                              After VMware: Building the Private Cloud You Actually Want
                              https://www.truthinit.com/index.php/channel/2253/after-vmware-building-the-private-cloud-you-actually-want/
                            • 11/18/2027
                              01:00 PM
                              11/18/2027
                              Assume Breach, Prove Recovery
                              https://www.truthinit.com/index.php/channel/2254/assume-breach-prove-recovery/
                            • 12/16/2027
                              01:00 PM
                              12/16/2027
                              The Self-Running Service Desk
                              https://www.truthinit.com/index.php/channel/2255/the-self-running-service-desk/
                            Truth in IT
                            • Sponsor
                            • About Us
                            • Terms of Service
                            • Privacy Policy
                            • Contact Us
                            • Preference Management
                            Desktop version
                            Standard version