HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

OWASP Top 10 Web Security Risks of 2017 - Flashcards

March 7, 2018

There’s no such thing as perfectly secure software. All software has vulnerabilities, and it’s up...

Calling All “Bureaucracy Hackers”

March 5, 2018

Lisa Wiswell, a HackerOne advisor and a principal at GRIMM cybersecurity firm, thinks the government...

h1-202 CTF Winners Announced (and links to write-ups)

March 1, 2018

Thanks to all of you who participated in the h1-202 CTF! We had a lot...

Hacker Q&A with Shubham Gupta: Patience and Passion

February 23, 2018

Over $25 million in bounties paid to ethical hackers all over the world. According to...

Hack Your Way to the White House

February 16, 2018

The h1-202 CTF is here! On March 25th, 2018, h1-202 will be happening in Washington...

Code Security

Code Review as a Service on Bitbucket Cloud

February 13, 2018

Based on suggestions from our Bitbucket Cloud customers, we rebuilt our Atlassian Bitbucket Cloud integration...

Alexa, ask HackerOne...

February 12, 2018

From left to right: Martijn, Miray, and Tom (not pictured: Annette) A few weeks ago...

How Hackers Spend Their Bounties

February 8, 2018

Over $24 million in bounties in five years. A goal of $100 million by the...

Q&A with Jane Frankland: GDPR, CISOs, and Women in Cybersecurity

February 7, 2018

Jane Frankland is an award-winning entrepreneur, speaker, and consultant in cybersecurity and entrepreneurism. For more...