HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Measure, Compare, and Enhance Security Programs with HackerOne Benchmarks

October 24, 2024

HackerOne Benchmarks is a set of features designed to provide insights for optimizing your security program’s performance.

Offensive Security

AWS Security Configuration Review and Best Practices

October 23, 2024

Learn the ins and outs of AWS security configuration testing and why community-driven PTaaS is the best method.

Exposure Management

OWASP Top 10: The Risk of Cryptographic Failures

October 21, 2024

Cryptographic failures: what are they and why are they considered so concerning by the OWASP Top 10?

Exposure Management

Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen

October 17, 2024

The file upload vulnerability type is as broad in scope as the number of different...

Public Policy

How To Use HackerOne’s Global Vulnerability Policy Map

October 14, 2024

Use HackerOne's Global Vulnerability Policy Map to keep up with evolving VDP mandates and recommendations.

Public Policy

European Council Adopts Cyber Resilience Act

October 11, 2024

Learn about the EU Council's Cyber Resilience Act, where we're headed, and what we believe should happen next.

Measure Your AI Risk Preparedness with This Interactive Self-Assessment Tool

October 10, 2024

Learn how HackerOne's AI Risk Readiness Self-Assessment Tool helps measure your AI security and compliance preparedness.

Culture & Talent

The Recruitment Process: What to Expect When You Apply at HackerOne

October 9, 2024

If you’re considering applying, here’s a look at what you can expect from the process...

Offensive Security

Pentesting for Internal Networks

October 9, 2024

Learn how to optimize internal network pentesting through community-driven pentesting as a service (PTaaS).