HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

Avoiding N+1 Database Queries in ASP.NET: A Practical Guide

January 16, 2024

In web applications, performance issues can often stem from inefficient database queries. One such notorious...

Code Security

Integrating OpenAI into Your Application: A Security Perspective

January 15, 2024

Integrating OpenAI's language models like GPT-3 into applications has become increasingly popular. However, with great...

Code Security

Safely Handling Large Integers in JSON: Best Practices and Pitfalls

January 12, 2024

In the world of software development, the transmission of data in a structured, reliable format...

Exposure Management

HackerOne Partners With Semgrep to Combine Expert Code Review With Powerful Automation

January 11, 2024

HackerOne's partnership with Semgrep harnesses the power of automation and combines it with expert code review.

Code Security

Handling Large File Uploads in React: Securely Using AWS S3 Pre-signed URLs

January 10, 2024

Uploading large files, especially those spanning multiple gigabytes, from a React application can be a...

Code Security

The Fallacy of Overreliance on Traits in PHP: Unmasking Poor Class Design

January 10, 2024

Introduction In the realm of object-oriented programming (OOP), PHP's introduction of traits in version 5.4...

Code Security

Using AI to Draft Code Review Summaries

January 8, 2024

At HackerOne PullRequest, we are always looking for new ways to integrate AI into the...

Code Security

Precision Matters: Why Using Cents Instead of Floating Point for Transaction Amounts is Crucial

January 8, 2024

In the world of software security and financial transactions, the precision of data handling is...

Code Security

Writing Effective Commit Messages in Git: Best Practices and Examples

January 4, 2024

Commit messages in Git are more than just a mandatory step in version control; they...