johnk
2017-06-13 12:00:00
www.hackerone.com
Like many companies in Silicon Valley, we at HackerOne believe in using what we build. (This is sometimes referred to as eating your own dog food.) It helps us better understand our users’ concerns because we can see them firsthand.
We’ve depended on our bug bounty program to keep our product safe and secure from the start. Since day one, we’ve resolved over 200 reports and paid out over $140,000 in bounties. As a company full of former (and current) hackers and security experts, we aim to have one of the strongest bug bounty programs in the world.
But even at a relatively small company like HackerOne, it can be difficult to keep infosec and development teams in sync all the time. Integrating an infosec platform like HackerOne with software dev tools makes it easier to bridge this gap.
As such, we recently launched a new JIRA integration, and today we’re continuing this effort with the introduction of our new Phabricator integration. We’re a Phabricator shop here at HackerOne, and we built this integration to address some of the historical pain points we saw in our organization.
We’ve been using the Phabricator integration here at HackerOne the past few weeks, and here’s the value we’re seeing so far:
Bring infosec and dev a little closer
With the Phabricator integration, we’ve simplified our triage and repair process by enabling a seamless handoff to the dev team. How?
It’s now possible to view updates on Phabricator tasks within a HackerOne report. This two-way integration means that whenever a Phabricator task’s state changes or a comment is added, an internal comment is posted on the appropriate HackerOne report (and vice versa from HackerOne → Phabricator). Admins also have control to customize the information they want to sync from HackerOne to Phabricator and Phabricator to HackerOne.
The result is no switching back and forth between HackerOne and Phabricator!
Phabricator Task
HackerOne Report
Create Phabricator tasks with one click
We can also easily create Phabricator tasks with just one click straight from a HackerOne report. The process runs in the background, and the ticket is automatically referenced in the HackerOne report.
Getting started
To enable the new Phabricator integration, sign into your HackerOne account and go to your integration settings (Settings -> Program -> Integrations).
Interested in trying it out? Please let us know if you have questions or if you would like help getting started.
The HackerOne Phabricator integration is brought to you by Willian, Maarten, Alexander, Jens, and the HackerOne team.
HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited. As the contemporary alternative to traditional penetration testing, our bug bounty solutions encompass vulnerability assessment, crowdsourced security testing and responsible disclosure management. Discover more about our hacker powered security testing solutions or Contact Us today.
Keep your files stored safely and securely with the SanDisk 2TB Extreme Portable SSD. With over 69,505 ratings and an impressive 4.6 out of 5 stars, this product has been purchased over 8K+ times in the past month. At only $129.99, this Amazon’s Choice product is a must-have for secure file storage.
Help keep private content private with the included password protection featuring 256-bit AES hardware encryption. Order now for just $129.99 on Amazon!
Help Power Techcratic’s Future – Scan To Support
If Techcratic’s content and insights have helped you, consider giving back by supporting the platform with crypto. Every contribution makes a difference, whether it’s for high-quality content, server maintenance, or future updates. Techcratic is constantly evolving, and your support helps drive that progress.
As a solo operator who wears all the hats, creating content, managing the tech, and running the site, your support allows me to stay focused on delivering valuable resources. Your support keeps everything running smoothly and enables me to continue creating the content you love. I’m deeply grateful for your support, it truly means the world to me! Thank you!
BITCOIN bc1qlszw7elx2qahjwvaryh0tkgg8y68enw30gpvge Scan the QR code with your crypto wallet app |
DOGECOIN D64GwvvYQxFXYyan3oQCrmWfidf6T3JpBA Scan the QR code with your crypto wallet app |
ETHEREUM 0xe9BC980DF3d985730dA827996B43E4A62CCBAA7a Scan the QR code with your crypto wallet app |
Please read the Privacy and Security Disclaimer on how Techcratic handles your support.
Disclaimer: As an Amazon Associate, Techcratic may earn from qualifying purchases.