HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Feedback-Driven Interviewing at HackerOne

July 11, 2024

The Talent Acquisition team currently has a net promoter score (NPS) of 56%, while the...

Ethical hackers solving security problems

What HackerOne Customers Say About the Problems Hackers Solve

July 11, 2024

Learn why organizations work with ethical hackers, like preventing breaches, meeting regulatory compliance, and helping the security budget.

Offensive Security

Pentesting for Web Applications

July 10, 2024

Learn testing methodologies, common vulnerabilities, and best practices for pentesting web applications with PTaaS.

Security Compliance

Offensive Security

DORA: What You Need to Know

July 8, 2024

Learn about DORA, the new EU regulation for digital operational resilience, and how to meet the requirements with pentesting.

HackerOne customers working with ethical hackers

What HackerOne Customers Say About Remediating Vulnerabilities and Getting the Best Results From Hackers

July 4, 2024

Learn how HackerOne customers remediate vulnerabilities and get the best results and value from ethical hackers.

Introducing HackerOne's Hai API: Revolutionize Your Workflow Automation with AI

June 28, 2024

Learn about Hai API: designed specifically for customers seeking efficient interaction and automation capabilities.

Exposure Management

Common Ecommerce Vulnerabilities: Reflected XSS

June 27, 2024

With an example from Shopify, learn about the impact of Reflected XSS vulnerabilities in ecommerce.

Federal agencies cybersecurity standards

Security Compliance

Offensive Security

Pentesting for NIST 800-53, FISMA, and FedRAMP

June 26, 2024

Learn how to address NIST 800-53, FISMA, and FedRAMP compliance with pentesting and the ethical hacker community.

Pride Month: Stories from Our LGBTQ+ Employees

June 25, 2024

We believe in fostering an environment where everyone feels valued and empowered to be their...