HackerOne Blog

Code Security

Return on Mitigation

Code Security

H1 Code

The Cost Savings of Fixing Security Flaws in Development

February 25, 2025

There’s no debate that catching and fixing security flaws in development saves time, money, and stress.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

Why is NPM Fetching a Dependency Not in My package-lock.json?

January 25, 2024

When using npm to manage your JavaScript packages, you might occasionally encounter a puzzling situation...

Code Security

Identifying and Remediating CWE-328 Reversible One-Way Hash in Django Applications

January 24, 2024

In the world of web development, security is a paramount concern, especially when it comes...

Code Security

Mitigating CWE-352: Cross-Site Request Forgery in Ruby Applications

January 23, 2024

Cross-Site Request Forgery (CSRF) is a security vulnerability that allows attackers to trick users into...

Code Security

Optimizing Performance in Generative AI: Trimming Tokens

January 22, 2024

Generative AI and Large Language Models (LLMs) like GPT-4 and Claude 2 has revolutionized the...

Code Security

Understanding the Benefits of Key Derivation Functions: A Deep Dive into PBKDF2

January 18, 2024

Hashing values is a cornerstone technique for protecting sensitive data. However, with rising computational power...

Code Security

Harnessing AI to Pinpoint Security Hotspots in Code Review

January 18, 2024

At HackerOne, we understand the challenge of maintaining robust security in your codebase. That's why...

Code Security

Avoiding N+1 Database Queries in ASP.NET: A Practical Guide

January 16, 2024

In web applications, performance issues can often stem from inefficient database queries. One such notorious...

Code Security

Integrating OpenAI into Your Application: A Security Perspective

January 15, 2024

Integrating OpenAI's language models like GPT-3 into applications has become increasingly popular. However, with great...

Code Security

Safely Handling Large Integers in JSON: Best Practices and Pitfalls

January 12, 2024

In the world of software development, the transmission of data in a structured, reliable format...