HackerOne Blog

The latest from HackerOne

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

September 1, 2026

HackerOne ran Anthropic's Mythos 5 model against its own production code. Here's what a critical RCE finding revealed about AI-accelerated security.

Read Now

All

CTEM

Engineering

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Seven Essential Components Of A Top-Tier Attack Surface Management Program

June 7, 2023

1. Discover and Import Maintaining an up-to-date inventory of all your internet-facing assets is crucial...

Code Security

Audit the Security Posture of DevOps with HackerOne Code Security Audit

June 1, 2023

Use Code Security Audit for DevOps DevOps teams may care about security, but it is...

A Year In HackerOne’s Bug Bounty Program

May 30, 2023

Hackers Report The Most Vulnerabilities In 2022 To Keep The Platform Secure We looked at...

Governments Across The World Are Mandating Vulnerability Disclosure So Why Are Companies Sitting On Their Hands?

Security Compliance

Public Policy

GUEST BLOG: Governments Across The World Are Mandating Vulnerability Disclosure So Why Are Companies Sitting On Their Hands?

May 24, 2023

The IoT Security Foundation’s fifth annual report into the state of vulnerability disclosure consumer Internet...

Exposure Management

GUEST BLOG: Vulnerability Disclosure Adoption In The Consumer IoT space Is Lagging, But What About Elsewhere?

May 19, 2023

There is a lot of focus, rightly so, on the consumer IoT space. We have...

Decoding the HackerOne Code of Conduct

May 16, 2023

When hackers participate in programs on the HackerOne platform, they agree to help empower our...

FDA's New Cybersecurity Requirements: Are You Prepared as a Medical Device Manufacturer?

Security Compliance

Public Policy

FDA's New Cybersecurity Requirements: Are You Prepared as a Medical Device Manufacturer?

May 12, 2023

Where To Begin? Companies submitting products for FDA approval must do the following: Provide details...

First Time Valid Bugs Smashed in April 2023!

May 10, 2023

First off, we want to congratulate everyone who found their first bug on H1! It is an incredible achievement and one that shouldn’t go unnoticed.

Exposure Management

Prove Your Worth: How to Measure Cybersecurity ROI and Impress Your Board

May 9, 2023

Across the board, companies face headcount and budget cuts, and security teams must do more with less.