HIPAA and Pentesting: What You Need to Know

**Executive summary:** This document explains HIPAA regulatory requirements and the HITRUST Common Security Framework for protecting patient health information (PHI), highlights the role of pentesting in assessing and improving controls for HIPAA/HITRUST compliance, and promotes HackerOne Pentest services as a means to identify vulnerabilities and demonstrate compliance readiness.