AI agent harnesses are getting simpler as models get smarter. See how HackerOne evolved its security AI architecture across 18 months of frontier model changes.

Public Policy

H1 Response

EU CRA Reporting Goes Live This Friday. Are You Ready?

September 8, 2026

The EU Cyber Resilience Act's mandatory vulnerability reporting requirements take effect September 11. Here's what manufacturers need to know to meet the 24-hour window.

H1 Platform

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Enterprise building on digital background

CTEM

CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments

August 24, 2026

M&A activity, supply chain risk, and multi-framework compliance make enterprise CTEM a different challenge. See how security teams should scale continuous threat exposure management.

Public Policy

Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules

August 20, 2026

HackerOne submitted comments to CISA on CIRCIA's proposed rules. Here's what needs to change to make federal cyber incident reporting focused, fair, and workable.

Public Policy

H1 Response

Cybersecurity Oversight Belongs to the Board

August 18, 2026

NIS2 places cybersecurity oversight on boards, not just security teams. See what documented accountability looks like and how to build a process regulators expect.

CTEM

H1 Platform

How to Build a CTEM Program: A 90-Day Implementation Roadmap

August 13, 2026

A 90-day roadmap for building a continuous threat exposure management program, covering governance, discovery, validation, and mobilization.

Clock firing three colorful rays of light

CTEM

H1 Platform

New CTEM Metrics That Matter: How to Brief Your Board on AI-Accelerated Exposure

August 5, 2026

Vulnerability counts no longer tell the full story. Here are the three CTEM metrics security leaders should bring to the board in the age of AI-accelerated exposure.

Exposure Management

Hai Triage

Vulnerability Prioritization Is Broken: Your Mediums Are Chaining Into Criticals

July 30, 2026

AI attack chains turn medium findings into criticals. Why severity-sorted queues fail, and what chain-aware vulnerability prioritization looks like instead.