HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

Secure Coding Practices: Mastering URL Encoding for Enhanced Web Security

April 8, 2024

In the realm of web development, understanding the intricacies of URL encoding is a crucial...

Exposure Management

The Importance of Credential Rotations: Best Practices for Security and Data Protection

April 5, 2024

Learn the importance of credential rotations and best practices for managing them effectively from HackerOne's experts.

Code Security

Leveraging JSDoc for Better Code Documentation in JavaScript

April 4, 2024

In the realm of software development, particularly within dynamic languages like JavaScript, maintaining clear and...

Offensive Security

Ten Practical Tips For High-Value Pentest Engagements

April 4, 2024

HackerOne's Spencer Chin and pentester Jasmin Landry give 10 tips for executing a successful pentest from start to finish.

Code Security

Mastering Internationalization in Software Engineering

April 3, 2024

In the rapidly expanding digital world, the ability to adapt software for global markets is...

Offensive Security

Pre-Pentest Checklist: Essential Questions to Answer Before Your Next Pentest

April 3, 2024

Explore the foundational aspects of pentesting—focusing on 12 questions that answer the "what" and "why" of pentesting.

Code Security

The Hidden Dangers of Crafting Your Own Regular Expressions for Input Validation

April 2, 2024

In the realm of software development, ensuring the security of your application is paramount. One...

Code Security

Simplifying Conditional Logic in TypeScript: The Power of Logical Operators and Nullish Coalescing

April 1, 2024

In the realm of software development, writing clean, efficient, and easily readable code is as...

An Emerging Playbook for AI Red Teaming With HackerOne

April 1, 2024

HackerOne builds upon the foundation of bug bounty in our approach to AI Red Teaming.