The Paranoids

Protecting Yahoo

We're the information security team — widely known as The Paranoids — that defends the things you love the most about Yahoo from cybersecurity threats.

Securing Infrastructure

Maintaining security controls and providing expertise that protects our most valuable assets, the data that powers your business.

Controls & Policies

Advancing
Industry

Improving the overall state of security through vulnerability research and open-source projects.

Open Source: Arkime

Shepherding Culture

Combining offensive security and social science to enable a company culture that respects your information.

Case Study (HBR)

Building Community

Using bug bounty as a tool to incentivize independent security researchers to improve the security of services you rely on.

Vulnerability Disclosure

Are you here looking to disclose a vulnerability to the Paranoids' Bug Bounty Program?!

Report Now

Paranoids Blog

Paranoids’ Vulnerability Research: NetIQ iManager Security Alerts

October 29, 2024

Making Red Teaming Easier: ASHIRT, An Open Source Tool For Operators

February 27, 2024

Scaling Up Supply Chain Security: Implementing Sigstore for Seamless Container Image Signing

December 18, 2023

View All

Paranoids Podcast

Check out the latest episode to hear how the Paranoids are working to improve Yahoo's security posture.

Listen now

Connect

Keep up with the Paranoids' blog posts and podcast on X (Twitter).

Contribute

Fork our open-source projects on Github.

Learn more

Collaborate

We're Hiring! There has never been a better time to join us.

Apply now

Contact

Looking to get in touch for any reason: Reach Out.

Email us

Our Companywide Commitment: Transparency Report

Yahoo is committed to transparency. As part of this commitment, the company publishes information bi-annually to provide public insight into the government requests we receive, as well as how we respond to these requests.