HackerOne Blog

The latest from HackerOne

Pentesting Must Evolve: Continuous Validation at AI Scale, Expert Verified

January 26th, 2026

Traditional pentests can’t keep pace with modern development. Agentic Pentest as a Service delivers continuous, human-validated security at scale.

Read Now

All

Cloud Security

Code Security

Crowdsourced Security

Culture & Talent

Defense in Depth

From the CEO

HackerOne News

Offensive Security

Public Policy

Return on Mitigation

Security Compliance

Security Research

Exposure Management

Log4J webinar with Chris Evans and Jobert Abma

Exposure Management

Log4Shell: Attack Evolution

January 6th, 2022

For many security teams, the holiday season was spoiled by the challenging remediation of Log4Shell...

Code Security

How to Catch Broken Access Control Security Vulnerabilities in Code Review Part 2

January 4th, 2022

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

Code Security

How to Catch the Top OWASP 2021 Security Category - Broken Access Control - in Code Review

January 2nd, 2022

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

Learn the top five takeaways from the 2021 Hacker-Powered Security Report

Security Research

Top 5 Takeaways from the 2021 Hacker-Powered Security Report: Industry Insights

December 21st, 2021

For the fifth year in a row, HackerOne published a report that provides insights from...

Code Security

Tips for Migrating to a New Computer for Programmers

December 19th, 2021

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

Exposure Management

CWE (Common Weakness Enumeration) and the CWE Top 25 Explained

December 16th, 2021

Common Weakness Enumeration (CWE) is a system to categorize software and hardware security flaws—implementation defects...

Code Security

The Top 5 Most Common Security Issues I Discover When Reviewing Code

December 15th, 2021

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...

Exposure Management

Log4j Vulnerability Activity on the HackerOne Platform

December 13th, 2021

December 17th Update: Vulnerabilities in Log4j have been evolving over the course of this week...

Code Security

Reviewing One's Own Code

December 12th, 2021

About the author Will Barrett is a Software Engineer, Technical Lead, and Engineering Manager from...