HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Code Security

Tackling the Goliath: Effective Strategies for Reviewing Large Codebases

November 29, 2023

Understanding the Challenge In an ideal world, code reviews are concise, focused, and manageable. However...

Mercado Libre working with ethical hackers in their public bug bounty program

Exposure Management

Mercado Libre’s Journey to a Public Bug Bounty Program

November 28, 2023

HackerOne is delighted to announce the launch of Mercado Libre’s Public Bug Bounty Program.

Code Security

Secure and Effective Logging in Golang: Best Practices and Tools

November 27, 2023

Logging is an essential aspect of software development, serving as a window into the operational...

Code Security

Why You Should Use Pull Requests: A Developer's Essential Tool

November 26, 2023

In the ever-evolving landscape of software development, the efficient management of code changes is a...

Women in cybersecurity at the Glass Firewall Conference

Inaugural Glass Firewall Conference Invites Women to Learn About Cybersecurity

November 21, 2023

The inaugural Glass Firewall Conference: Breaking Bytes and Barriers was sponsored by Capital One, GitHub, and HackerOne.

Government agency implementing Zero Trust with a VDP

Security Compliance

Public Policy

How VDP Aligns With Zero Trust

November 20, 2023

A core component of Zero Trust is enabling external testers to validate the continuous security of external-facing assets, like through a VDP.

Security Compliance

Public Policy

Fortifying Assets for SEC Compliance with HackerOne

November 16, 2023

After the SEC's recent charges against SolarWinds, publicly traded companies need robust cybersecurity risk management.

Meet the Talent Strategy Team

November 15, 2023

Our understanding of leadership and employee needs and the ability to build learning and development...

A security team prioritizing vulnerability management

Exposure Management

Vulnerability Prioritization: Severity Does Not Mean Priority

November 14, 2023

A data-informed prioritization strategy is integral to ensuring remediation efforts are practical — and severity does not always mean priority.