HackerOne Blog

The latest from HackerOne

Finding Fast, Fixing Slow: The Rising Exposure Debt

May 6, 2026

Vulnerability submissions are up 76%. Unresolved criticals grew 25x. HackerOne platform data reveals a widening remediation gap that security teams can't afford to ignore.

Read Now

All

CTEM

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

Navigating the Perils of Race Conditions in iOS App Development

January 29, 2024

In the world of iOS app development, ensuring smooth, glitch-free performance is a top priority...

Code Security

Leveraging Async/Await in ASP.NET for Enhanced Performance

January 28, 2024

In the realm of ASP.NET, the async/await pattern stands as a powerful tool to enhance...

Code Security

Implementing a Custom React Hook: Best Practices and a Practical Example

January 26, 2024

React, a popular JavaScript library for building user interfaces, offers a powerful feature called hooks...

Offensive Security

Recap: Elite Pentesters Tell All in a Live Q&A

January 25, 2024

Three elite HackerOne pentesters recently shared their stories in a live AMA session that looked at the impact and results of community-driven pentesting.

Code Security

Why is NPM Fetching a Dependency Not in My package-lock.json?

January 25, 2024

When using npm to manage your JavaScript packages, you might occasionally encounter a puzzling situation...

Code Security

Identifying and Remediating CWE-328 Reversible One-Way Hash in Django Applications

January 24, 2024

In the world of web development, security is a paramount concern, especially when it comes...

Code Security

Mitigating CWE-352: Cross-Site Request Forgery in Ruby Applications

January 23, 2024

Cross-Site Request Forgery (CSRF) is a security vulnerability that allows attackers to trick users into...

Code Security

Optimizing Performance in Generative AI: Trimming Tokens

January 22, 2024

Generative AI and Large Language Models (LLMs) like GPT-4 and Claude 2 has revolutionized the...

Code Security

Understanding the Benefits of Key Derivation Functions: A Deep Dive into PBKDF2

January 18, 2024

Hashing values is a cornerstone technique for protecting sensitive data. However, with rising computational power...