Strong ARM tactics?

HackerOne's new approach includes an Attack Surface Management product to help discover and protect assets.

  • 1 week ago Posted in

HackerOne has launched Attack Resistance Management (ARM) - a new category of security solution that targets the root causes of the attack resistance gap. This gap is caused by incomplete knowledge of digital assets, insufficient testing, and a shortage of the right skills. Attack Resistance Management (ARM) combines attack surface knowledge with the power of ethical hackers to give organizations a true security advantage. To complete ARM, HackerOne announced its HackerOne Assets product, available later this year, which provides discovery and monitoring of all known and unknown assets.



“Attack Resistance Management is crucial to driving down cyber risk,” said Marten Mickos, CEO of HackerOne. “Our customers’ security teams have long benefitted from the insights and expertise of the ethical hacking community. With Attack Resistance Management, those creative insights provide actionable intelligence to developers, operations, and security teams to build secure products and avert cyberattacks in a cost effective manner.”



ARM combines:



Security Talent Management - HackerOne brings its existing expertise in the recruitment, vetting, and training of ethical hackers to the approach. The platform ranks hackers and connects organizations to those with the most effective skills for their specific requirements.


Reconnaissance and Risk Ranking - HackerOne introduced its Assets product that helps rank the exploitability of vulnerabilities and tackle the riskiest assets first with continuous mapping and prioritization. Assets help customers:

Get global visibility across their attack surface by clearly documenting discovered assets and their associated threats.

Validate and rank asset vulnerabilities using insight from hackers with real-world expertise.

Capitalize on real-time, dynamic responses to their shifting threat environment with continuous discovery and analysis.

HackerOne Assets is expected to be available for purchase in the HackerOne platform this summer.



Testing and Triage - In addition to HackerOne’s established testing solutions, from simple spot checks for new features to pentests for compliance, and in-depth security assessments for new applications, its recent acquisition of code review-as-a-service platform, PullRequest, means customers can benefit from expert review at every stage of the development lifecycle.


Skills and Intelligence Creation - The HackerOne platform delivers insights vulnerability data to customers so they can identify, verify and remediate the next likeliest source of security risk in their environment. For customers lacking the in-house expertise, the new Security Advisory Service provides experienced security professionals to better leverage vulnerability data. To complete the intelligence offering, HackerOne delivers red team enrichment, developer education, vulnerability intelligence, scanner rules, and threat modeling with its expanding partner network.


"Attack Resistance Management is a fantastic addition to the HackerOne product offering and something we're exploring to continue to mature our engagement with the ethical hacking community,” said Stu Hirst, CISO of Trustpilot. “Ethical hackers have repeatedly proved their value to Trustpilot, finding critical bugs that automated scanning solutions cannot catch. Arming our team with HackerOne’s human insight and combining it with our attack surface management efforts adds another layer of confidence that our attack surface is not just mapped, but covered.”

New report from Tessian and the Ponemon Institute reveals that email has become the riskiest channel for data security in today’s organizations.
Energy professionals believe that cyber-attacks on the industry are likely to cause harm to life, property and the environment in the next two years. 84% expect physical damage to assets and 57% anticipate loss of life.
Veeam unveils the results of its 2022 Ransomware Trends Report at VeeamON 2022, finds that cyber criminals are successfully encrypting an average of 47% of production data and victims are only able to recover 69% of impacted data.
ThreatQ Platform and ThreatQ Investigations will be used by telecom conglomerate Comcast, parent of NBC Universal and SKY Group, to operationalise security intelligence across cybersecurity use cases.
Flexible options, funded directly by the specialist distributor, will help partners easily transition to the subscription economy and make tech more accessible and affordable.
Nuvias partners gain access to the entire Armis portfolio, addressing the considerable asset visibility market opportunity in Western Europe.
Data from more than 1,300 global respondents combined with expert analysis to reveal goals, benefits, and challenges of cloud-native technology in 2022.
Infoblox unveils a global report examining the state of security concerns, costs, and remedies.