HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Software Vulnerability Disclosure in Europe: Summary and Key Highlights of the European Parliament CEPS Task Force Report

August 14, 2018

In the autumn of 2017, the Centre for European Policy Studies (CEPS), a European Union...

Code Security

Pesky Server Auth Issues We’ve Found

August 10, 2018

For backend server applications, getting authentication right for your APIs is a critical component for...

Code Security

Using FOSSA for License Compliance

August 9, 2018

Technical leaders are often caught by surprise during diligence on a round or exit: the...

Sumo Logic Looks to Hacker-Powered Pen Testing for Security and Compliance

July 31, 2018

Secrecy has been a trademark of security culture for decades. Companies like cloud-based log management...

Code Security

Code Review as a Service on GitLab.com

July 31, 2018

We are pleased to announce that we've expanded our integration to support GitLab.com code repositories...

Zomato’s First Anniversary with Bug Bounties: Q&A with Security Lead, Prateek Tiwari

July 23, 2018

Headquartered in India - restaurant discovery, online ordering and table reservations platform Zomato currently operates...

The Hacker-Powered Security Report 2018

July 11, 2018

"Crowdsourced security testing is rapidly approaching critical mass, and ongoing adoption and uptake by buyers...

H1-702 CTF Winners Announced!

July 9, 2018

Thanks to all the hackers who participated in the h1-702 2018 CTF! For the first...

Lawfully Hacked

July 9, 2018

The best way to prevent getting hacked is to try to get hacked. Paradoxical as...