HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Defense in Depth

45% Say Security Is Harder Now: Here’s How Defense in Depth Helps

May 30, 2025

Learn how HackerOne's defense in depth strategy can help you tackle the top five cybersecurity challenges in today's evolving threat landscape.

Public Policy

HackerOne Goes to Washington (Again)

May 27, 2025

HackerOne champions secure AI and VDPs in Washington, fostering global collaboration and advancing bipartisan cybersecurity resilience.

Exposure Management

SCW + HackerOne: Leveling up developer security skills with HackerOne vulnerability data

May 23, 2025

HackerOne partners with Secure Code Warrior to upskill developers, integrating real-world vulnerability data with targeted, hands-on security training.

Cybersecurity image with two locks above mountains

Public Policy

From Guidance to Practice: Supporting AI Data Security Through HackerOne

May 22, 2025

See how HackerOne supports new CISA guidance on AI data security, with AI red teaming, vulnerability disclosure programs, and more.

Public Policy

Global Cyber Policy in Focus: Reflections from RSA Conference 2025

May 21, 2025

Explore HackerOne's reflections from RSA 2025, where public-private collaboration, ethical hacking, and global partnerships drive solutions to cross-border cyber threats.

Crowdsourced Security

Inside Security@ Dallas: Insights to Attract Elite Researchers and Prove ROI

May 21, 2025

At HackerOne’s Security@ Dallas event, top program leaders and security researchers show the value of offensive security and how to attract the best talent for your bug bounties.

Defense in Depth

10 Critical Tactics to Prevent Social Engineering Attacks in the Wake of Scattered Spider

May 13, 2025

Recent high-profile social engineering attacks cost companies millions in damages. Implement these 10 key security elements to avoid becoming the next victim.

Crowdsourced Security

Smart Contracts: Common Vulnerabilities and Real-World Cases

May 13, 2025

Smart contracts are transforming the digital economy—but with that innovation comes risk. In this post, we break down the most common smart contract vulnerabilities, explore real-world security failures, and highlight how HackerOne is helping to strengthen security.

Crowdsourced Security

Exposure Management

From Report Chaos to Program Clarity: Meet Findings

May 8, 2025

Findings helps you prioritize vulnerabilities faster with one view across all programs. Filter, search, and act with speed and clarity.