All Articles

This article explains why an exposed Google Maps API key may become a serious billing-abuse risk when the same cloud project also has Gemini or other billable AI APIs enabled. It shows what security teams and penetration testers should check to understand the real impact behind an exposed key.

by Levente Molnarin bug-bounty,ciso,security-testing,ethical-hacking

In this article, we explain why ISO 27001 matters for a bug bounty platform. We also share how it supports our work with enterprise customers looking for a European bug bounty platform with strong security governance.

by Balazs Poznerin hackrate,news

Hackrate achieved 1st place in Hungary, 9th in Europe, and 22nd globally at Hack The Box’s Global Cyber Skills Benchmark 2026, competing against 589 corporate teams worldwide.

by Levente Molnarin security-testing,ethical-hacking,hackrate,news

This article looks at how organizations can start preparing their vulnerability disclosure handling for the Cyber Resilience Act, and how Hackrate managed VDP can support that work. It may be useful for teams that want a clearer, more structured way to manage external vulnerability reports.

by Balazs Poznerin security-testing,ethical-hacking,news

Arbitrary File Upload via External Files Feature Allows Client-Side Remote Code Execution

by Samuele Gugliottain bug-bounty,security-testing,ethical-hacking,writeup

ENISA’s NIS2 technical implementation guidance treats vulnerability handling and disclosure (control 6.10) as a standalone requirement. This article explains what an assessor-grade vulnerability disclosure policy looks like in practice.

by Balazs Poznerin security-testing,ethical-hacking,news

This article explains Hackrate’s new status as Hungary’s first CVE Numbering Authority (CNA) and what that means in practice for coordinated vulnerability disclosure.

by Balazs Poznerin hackrate,news

This article explains why 2026 is the right time to make bug bounty a practical, continuous security feedback loop and how Hackrate can help you launch it with confidence.

by Balazs Poznerin hackrate,ethical-hacking,security-testing,news,getting-started

The Ministry of Regional Development of the Czech Republic partners with Hackrate to launch a public bug bounty program—empowering ethical hackers to strengthen national cybersecurity and set a precedent for the European public sector.

by Balazs Poznerin security-testing,ethical-hacking,news,hackrate

Shift from outdated metrics to advanced methods with Hackrate’s HackGATE to monitor the success of your Bug Bounty Programs.

by Levente Molnarin security-testing,ethical-hacking,news