HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

Getting the Certification to Review Code at Google

November 7, 2018

Many PullRequest reviewers have experience at big tech companies, like Facebook, Amazon, or Netflix. The...

Discovering programs is easier than ever with the new and improved Program Directory

November 5, 2018

Today, we’re excited to announce an overhaul of the HackerOne Program Directory! Since its launch...

Code Security

Code Reviewer Spotlight: Dylan Drop

November 5, 2018

A good code review process can be the fastest feedback loop for developers to receive...

What To Do When You're Stuck Hacking

November 1, 2018

Hacking can be tedious work. Sometimes you’ve been looking for hours, perhaps days, and you’re...

Financial Services: Tips for Bug Bounty Success

October 25, 2018

In our recent webinar, “ Bug Bounty Programs: Lessons Learned From Implementation In The Financial...

The Best is Yet To Come: DOD Awards New Hack the Pentagon Contract to HackerOne

October 24, 2018

Today we celebrate cyber defense. The U.S. Department of Defense’s Defense Digital Service (DDS) announced...

The Paranoids at Oath Take Bug Bounties to Argentina: h1-5411 Recap

October 10, 2018

For the first time, HackerOne kicked off fall by migrating south. Way south. All the...

Say Yes To Cyber Help

October 4, 2018

In 2016, the DoD said Yes to cyber help by launching the Hack the Pentagon...

The U.S. Marine Corps Resolves Nearly 150 Vulnerabilities Thanks to Hackers

October 3, 2018

“I think we found something good,” said hackers @sumlac, @teknogeek, and @johnny said to a...