All Articles

Traditional pentest and bug bounty both have their pros and cons — and for efficient security testing, making the right choice is crucial. Read our comparison.

by Levente Molnarin security-testing,ethical-hacking

Discover the key findings from our survey with security professionals, including the value of VDP for all organizations, the benefits of strong cybersecurity practices, and the importance of positive relationships with ethical hackers.

by Levente Molnarin security-testing,ethical-hacking,getting-started,ciso

While automated vulnerability scans provide a quick overview, they often leave critical gaps that can expose businesses to potential risks, giving you a false sense of security. Read our blog post on the limitations of automated vulnerability scans and the steps you can take for a holistic security approach.

by Levente Molnarin security-testing,ethical-hacking,getting-started,ciso

HackGATE, the industry's first managed gateway for monitoring security testing projects, allows organizations to streamline the auditing process, improve transparency, and separate ethical hackers from real-life attacks, empowering them to take control and ensure comprehensive security testing aligned with industry best practices.

by Balazs Poznerin security-testing,ethical-hacking,hackrate,news

AI-generated code is on the rise, but it comes with a major pitfall: it often contains vulnerabilities that can expose your company to malicious attacks. Read this blog post to learn the main risks of using AI tools to write code — and the steps you need to take to keep your code base secure.

by Levente Molnarin ciso,getting-started

Learn the key factors to consider when planning Penetration Testing as a Service. Discover how ethical hackers can help organizations comply with regulatory requirements and industry standards while improving customer confidence and trust in their products and services.

by Levente Molnarin security-testing,ethical-hacking

Find out what managed vulnerability disclosure policy is, how it works, and why you should consider using one.

by Balazs Poznerin ciso,hackrate,getting-started

PostgreSQL Database Exfiltration through the abuse of PostgREST requests

by Samuele Gugliottain bug-bounty,security-testing,ethical-hacking,writeup

Full Account Takeover of ANY user via Insecure Direct Object Reference (IDOR) on reset password functionality

by Samuele Gugliottain bug-bounty,security-testing,ethical-hacking,writeup

An interview about our background, offers and competition.

by Balazs Poznerin news,hackrate