Three elite HackerOne pentesters recently shared their stories in a live AMA session that looked at the impact and results of community-driven pentesting.

Code Security

Why is NPM Fetching a Dependency Not in My package-lock.json?

January 25, 2024

When using npm to manage your JavaScript packages, you might occasionally encounter a puzzling situation...

Code Security

Identifying and Remediating CWE-328 Reversible One-Way Hash in Django Applications

January 24, 2024

In the world of web development, security is a paramount concern, especially when it comes...

Code Security

Mitigating CWE-352: Cross-Site Request Forgery in Ruby Applications

January 23, 2024

Cross-Site Request Forgery (CSRF) is a security vulnerability that allows attackers to trick users into...

Code Security

Optimizing Performance in Generative AI: Trimming Tokens

January 22, 2024

Generative AI and Large Language Models (LLMs) like GPT-4 and Claude 2 has revolutionized the...

Code Security

Understanding the Benefits of Key Derivation Functions: A Deep Dive into PBKDF2

January 18, 2024

Hashing values is a cornerstone technique for protecting sensitive data. However, with rising computational power...

Developers finding code vulnerabilities with code security audit

Exposure Management

Offensive Security

How to Find Mistakes Earlier and Save Money With Code Security Audit

January 18, 2024

Learn how organizations can find mistakes earlier and save an average of $18,037 using Code Security Audit.

Code Security

Harnessing AI to Pinpoint Security Hotspots in Code Review

January 18, 2024

At HackerOne, we understand the challenge of maintaining robust security in your codebase. That's why...