HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

NestJS vs Express: A Comparative Analysis for Secure and Efficient Web Development

February 6, 2024

In the evolving landscape of web development, choosing the right backend framework can be a...

Software engineer using AI prompting for security vulnerabilities

How to Use AI Prompting for Security Vulnerabilities

February 6, 2024

Zahra Putri Fitrianti explores the power of AI prompting for security vulnerabilities at HackerOne.

Code Security

Setting Up CI GitHub Workflows for a New Python Project

February 5, 2024

GitHub Workflows are a powerful tool for automating software development processes. This post delves into...

Code Security

Getting Started with a Hugo-Powered Marketing Site

February 4, 2024

Creating a marketing site is an adventure in storytelling, where you're not just sharing a...

Code Security

Respectfully Reviewing Your Coworker's Code Changes

February 1, 2024

When it comes to code review, it's not just about what you say, but also...

Code Security

Certificate Pinning: Enhancing Client-Side Security

January 31, 2024

In the realm of cybersecurity, the protection of data in transit is paramount. Certificate pinning...

Code Security

Identifying and Remediating CWE-79: Cross-Site Scripting in ASP.NET

January 30, 2024

Cross-Site Scripting (XSS) vulnerabilities, particularly CWE-79, pose a significant threat to web applications, including those...

Code Security

Navigating the Perils of Race Conditions in iOS App Development

January 29, 2024

In the world of iOS app development, ensuring smooth, glitch-free performance is a top priority...

Code Security

Leveraging Async/Await in ASP.NET for Enhanced Performance

January 28, 2024

In the realm of ASP.NET, the async/await pattern stands as a powerful tool to enhance...