HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

Simplify React State Management Using Redux Toolkit

December 21, 2023

State management in React applications can be a challenging endeavor, especially when handling complex state...

Security leaders at SEGA and Six Group discuss the value of VDP and bug bounty

SEGA and SIX Group: The Value of VDP and Bug Bounty

December 20, 2023

SEGA Europe and SIX Group discuss the power of bug bounty and vulnerability disclosure programs (VDPs) with HackerOne.

Code Security

Python Pitfalls: The Perils of Using Lists and Dicts as Default Arguments

December 19, 2023

Python, renowned for its simplicity and readability, occasionally hides subtle complexities that can lead to...

Ethical hackers performing AI Red Teaming with HackerOne

Public Policy

H1 AI Red Teaming

Unlocking Trust in AI: The Ethical Hacker's Approach to AI Red Teaming

December 19, 2023

HackerOne offers robust AI Red Teaming services that help organizations bolster the security, fairness, and reliability of their AI deployments.

Code Security

Securely Signing Webhooks: Best Practices for Your Application

December 19, 2023

Webhooks have become a vital component in modern web applications, enabling real-time data sharing and...

Code Security

Common PHP Pitfalls: Understanding Array Behavior and Comparisons with Python and JavaScript

December 17, 2023

Understanding the nuances of the programming language you are using is crucial. Today, we're diving...

Code Security

Retrying and Exponential Backoff: Smart Strategies for Robust Software

December 14, 2023

In networked applications, the adage "try and try again" is not just a motivational phrase...

Spain team wins the Ambassador World Cup Finals 2023

Crowdsourced Security

The 2023 Ambassador World Cup Final: Results, Impact, and Looking Ahead

December 14, 2023

The final round of the 2023 Ambassador World Cup was an immense success.

Code Security

Shell Script Pitfalls and ShellCheck Solutions

December 13, 2023

Shell scripting is a powerful tool in any developer's toolkit, but it has many surprising...