Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybersecurity Funding

HackerOne Secures $9 Million, Appoints Katie Moussouris Chief Policy Officer

Vulnerability disclosure platform HackerOne has secured $9 million in a Series A round of funding, and has appointed Katie Moussouris, former senior security strategist lead at Microsoft, as the company’s chief policy officer.

Vulnerability disclosure platform HackerOne has secured $9 million in a Series A round of funding, and has appointed Katie Moussouris, former senior security strategist lead at Microsoft, as the company’s chief policy officer.

As chief policy officer, Moussouris will be responsible for the company’s vulnerability disclosure philosophy, and she’ll work to promote and legitimize security research among organizations, legislators and policy makers, HackerOne has revealed. 

At Microsoft, Moussouris led the Security Community Outreach and Strategy team responsible for the company’s bounty programs and the BlueHat conference. Microsoft’s Vulnerability Research program was also founded by Moussouris.

HackerOne was founded by Alex Rice, the company’s CTO and the man behind Facebook’s bug bounty program, and Merijn Terheggen, who has been named CEO. HackerOne became known in November 2013 when it announced hosting the Internet Bug Bounty project funded by Microsoft and Facebook. The project’s goal has been to make the Internet safer by offering cash rewards to security researchers who discover vulnerabilities in popular software applications.

The funding round was led by early stage venture capital firm, Benchmark Capital. Benchmark General Partner Bill Gurley and Lookout Mobile Security Founder John Hering have joined the HackerOne board of directors.

“This is a fascinating company with an innovative solution to an increasingly critical problem. Moreover, the vibrancy we see in the HackerOne community is quite similar to what we have seen with other community/marketplaces we have backed including ebay, Yelp, OpenTable, Zillow and Uber,” Gurley wrote on his blog.

“HackerOne is a true win-win, researchers are rewarded for their unique skills, and companies are able to identify vulnerabilities in a way that limits repercussions for their users,” Gurley noted.

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.

Register

Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.

Register

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Vulnerabilities

Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...

Cybersecurity Funding

SecurityWeek investigates how political/economic conditions will affect venture capital funding for cybersecurity firms during 2023.

Risk Management

The supply chain threat is directly linked to attack surface management, but the supply chain must be known and understood before it can be...

Vulnerabilities

Apple has released updates for macOS, iOS and Safari and they all include a WebKit patch for a zero-day vulnerability tracked as CVE-2023-23529.

Application Security

Drupal released updates that resolve four vulnerabilities in Drupal core and three plugins.

Funding/M&A

More than 450 cybersecurity-related mergers and acquisitions were announced in 2022, according to an analysis conducted by SecurityWeek

Funding/M&A

Twenty-one cybersecurity-related M&A deals were announced in December 2022.