HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Gateway Internal Network Testing with HackerOne

Offensive Security

Introducing HackerOne Gateway Internal Network Testing: Superior Security for Internal Networks

July 30, 2024

Introducing Gateway Internal Network Testing (INT), powered by Cloudflare’s Zero Trust Network Access (ZTNA) technology.

Exposure Management

Security Research

How a GraphQL Bug Resulted in Authentication Bypass

July 29, 2024

Experienced security researchers explain how a GraphQL bug resulted in authentication bypass — and how to avoid it.

person with hackerone hoodie walking to lincoln memorial

Lessons from HackerOne’s First Recharge Week

July 26, 2024

Our first-ever Recharge Week – July 1–5, 2024—aimed at giving most company employees a simultaneous...

Security Compliance

Exposure Management

Public Policy

Are You Ready for the New NIST Control Around Public Disclosure Programs?

July 25, 2024

A new NIST control requires SaaS vendors to “establish a public reporting channel for receiving reports of vulnerabilities in organizational systems and system components.”

Security Compliance

Offensive Security

HIPAA and Pentesting: What You Need to Know

July 24, 2024

Learn how to maintain compliance with HIPAA security standards through pentesting.

person is managing a meeting with technology engineer

Hack My Career: Meet Naz Bozdemir

July 24, 2024

We talked to Naz Bozdemir, Product Marketing Lead, about her unique path and asked her...

Exposure Management

Streamline Report Management with Custom Inboxes: Reducing Delays and Security Risks

July 23, 2024

Custom Inboxes Enhancements provide flexible report segmentation, reduce administrative overhead, and mitigate security risks.

employees join a virtual meeting to plan hack week

How HackerOne Organizes a Remote Hack Week

July 17, 2024

This year's Hack Week was dedicated to artificial intelligence (AI), and teams worked together to...

10 Years of the GitHub Security Bug Bounty Program

July 15, 2024

Celebrating 10 years of GitHub's bug bounty program! Learn insights into bug bounty growth from a top program.