PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing HackerOne Gateway Internal Network Testing: Superior Security for Internal Networks

hackerone.com | blog | #compliance | #penetration-testing | #cloudflare | #hackerone | #zero-trust | #gateway | #ztna | #internal-network-testing
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne launched Gateway Internal Network Testing (INT), built on Cloudflare ZTNA to let researchers test internal assets through zero-trust tunnels with logging and TLS decryption.
Published
Collected

Related coverage

blog · hackenproof.com
What Is Penetration Testing? How It Works, What You Get, and When to Test
A pentest is a time-boxed, authorized attack where ethical hackers chain flaws to prove exploitable risk, not just run scans. It outlines deliverables, audit drivers, and when to test.
research · projectblack.io
Cloudflare Tunnel & Ngrok Alternative: Entra Application Proxy Guide
As VPN appliances keep catching critical 0-days, the post weighs pre-authenticated ZTNA options and walks through publishing an internal WordPress site via Microsoft's Entra Application Proxy.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
blog · hackerone.com
CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments
This coverage gives security teams current context for monitoring, validation, and remediation.
Back