HackerOne Blog

Code Security

Return on Mitigation

Code Security

Code

The Cost Savings of Fixing Security Flaws in Development

February 25th, 2025

There’s no debate that catching and fixing security flaws in development saves time, money, and stress.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

PHP Date Handling: Subtle Pitfalls Subtracting Months

December 8th, 2023

Managing dates in PHP can be surprisingly tricky, even when using libraries like Carbon in...

Code Security

Integrating Generative AI into Your Application: Hosted Services vs. Self-Hosted Models

December 6th, 2023

The integration of Generative AI into applications is a pivotal step towards innovative solutions in...

Code Security

Incremental Changes in Code Reviews: A Strategy for Efficiency and Clarity

December 6th, 2023

In the world of software development, the importance of code reviews cannot be overstated. These...

Code Security

Code Reviewer Spotlight: Matt Buzanowski

December 5th, 2023

There are two types of developers, those that treat untrusted input as malicious by default...

Code Security

Integrating Generative AI into Your Application: A Security Perspective

December 4th, 2023

In the swiftly evolving landscape of software development, the integration of generative AI, such as...

Code Security

Slow Rolling Refactors in Laravel: Ensuring a Smooth Transition

December 3rd, 2023

Refactoring, the process of restructuring existing computer code without changing its external behavior, is a...

Code Security

Secure Markdown Rendering in React: Balancing Flexibility and Safety

December 1st, 2023

In the realm of web development, the use of Markdown for content creation has become...

Code Security

Golang's Improper Error Handling: A Subtle Path to Security Vulnerabilities

November 29th, 2023

Golang, known for its simplicity and efficiency, often catches developers off guard with its unique...

Code Security

Tackling the Goliath: Effective Strategies for Reviewing Large Codebases

November 29th, 2023

Understanding the Challenge In an ideal world, code reviews are concise, focused, and manageable. However...