HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

H1-202 Recap: Mapbox Pays Out Nearly $65,000 in One Day

April 11, 2018

Cherry blossoms, melting snow, sunshine and a whole lot of hacking.Twenty-seven hackers representing nine countries...

Q&A with CRANIUM: Easing Compliance with “GDPR in a Box”

April 10, 2018

As GDPR’s implementation date nears, more and more organizations are working to put in place...

Shopify Thanks Over 300 Hackers, Pays $850,000+ to Hackers in Three Years

April 9, 2018

Shopify’s commerce platform has awarded hackers more than $850,000 in bounties for helping secure its...

Code Security

3 Principles to Get Your Pull Request Reviewed Faster

April 7, 2018

How long does it take you and your team to get a pull request reviewed...

Q&A with HackerOne’s New Board Member: Kathryn Haun

March 28, 2018

We are thrilled to introduce the newest member of the HackerOne team, Kathryn Haun, who...

The CISO’s Guide to GDPR: Q&A with Thomas Fischer

March 27, 2018

“ I am by trade now a CISO. So I have to care about risk...

Mr. Chairman, we need hackers!

March 15, 2018

The more the world gets hacked, the more we need hackers. We need white hats...

GitHub Celebrates Four Years of Bug Bounties: Q&A with VP of Security, Shawn Davenport

March 14, 2018

GitHub celebrated the fourth anniversary of its Security Bug Bounty program and released a comprehensive...

GDPR: Let’s kill the FUD

March 12, 2018

It seems everywhere you look, the talk about GDPR is designed to scare you into...