@GitPushAll

Catching big problems before they're big problems @Hacker0x01, former COO @pullrequestcom (YC S17)

 Austin, TX
pullrequest.com
Joined March 2009
  • Tweets2.6K
  • Following1.3K
  • Followers617
280Media
PullRequest is now @Hacker0x01 Code 🎉 We started @pullrequestcom in 2017 to fight the compounding impact of bad code with AI + human expertise. Today that cost is ~$2.4T led by cybercrime losses, software supply chain problems & tech debt. Very excited for our next chapter.
HackerOne Code AI-powered security intelligence, context intelligence + expert validation. A visual of a Git pull request being opened, AI detecting security flaws, 2 issues detected validated as false-positives, 1 issue detected as a likely valid problem regarding missing step-up authentication. This issue is raised by an engineer who validated the detections to the code author. The code author acknowledges "Great catch!" and confirms they fixed the issue before merging the pull request.

ALT HackerOne Code AI-powered security intelligence, context intelligence + expert validation. A visual of a Git pull request being opened, AI detecting security flaws, 2 issues detected validated as false-positives, 1 issue detected as a likely valid problem regarding missing step-up authentication. This issue is raised by an engineer who validated the detections to the code author. The code author acknowledges "Great catch!" and confirms they fixed the issue before merging the pull request.

1
6
602
Less bullish on AGI timelines today after asking 3 frontier reasoning models to convert an .svg to lottie.
1
2
63
Check out what we've been working on: hackerone.com/product/code
65
Dan Mateer retweeted
Bill Gurley
@bgurley9 Apr 2025
Watching MCP gain momentum reminds me of early API adoption—huge potential but massive risk if you’re not careful. @Hacker0x01 bug bounty programs and AI red teaming aren’t nice-to-haves anymore. They bring in external perspectives, which is what you need when your system opens to the external world.
1
19
4
181
34,981
Proving ROI for "shift left" security is based on a doomed premise: cost savings by avoiding unexpected losses. Business value is return on mitigation + cost efficiencies of fixing it pre-prod. And do it right. Understand developers and how they work. hackerone.com/blog/cost-savi…
HackerOne The Cost Savings of Fixing Security Flaws in Development Illustration of a software development lifecycle (SDLC) diagram highlighting security controls and safeguards in the "Code" phase: - Detection (SAST, SCA) - Pre-merge CI/CD Embedment - Exception Management

ALT HackerOne The Cost Savings of Fixing Security Flaws in Development Illustration of a software development lifecycle (SDLC) diagram highlighting security controls and safeguards in the "Code" phase: - Detection (SAST, SCA) - Pre-merge CI/CD Embedment - Exception Management

70
I’m all caught up
1
79
There are vulnerabilities in code that was written and vulnerabilities in code that wasn’t written.
2
4
35
3,273
I usually use Zoom for recording demo videos but I tried another tool today and audio is riddled with a power saw next door and dogs barking. None of it came through when I re-recorded with @Zoom. Those audio engineers are doing amazing things to improve remote work QOL
1
110
Taking a beat to admire just how good Google search is
1
2
117
stalking people on GitHub is my love language
1
96
Beginning to think Kamala didn’t give me her real number.
3
109
Any time I feel like giving up I’m going to think of this grasshopper who hung onto my windshield at 60+mph for 20 miles.
2
136
Today @Hacker0x01 is launching a big improvement to program policy pages, providing structure and remove ambiguity! Here’s a great example from @MetaMask: hackerone.com/metamask.

MetaMask - Bug Bounty Program | HackerOne

The MetaMask Bug Bounty Program enlists the help of the hacker community at HackerOne to make MetaMask more secure. HackerOne is the #1 hacker-powered security platform, helping organizations find...

hackerone.com
4
8
2
92
11,094
"free in-store pickup?" yeah. thats what store is.
36
2,925
71
99,832
1,670,559
A company was looking for a new pentest vendor this year for their SOC 2 compliance. They were looking at competition so price was going to be important to them. HackerOne won based on that and the quality of our testers.
2
1
8
1,020
Last week @Hacker0x01 customers had over 300,000 lines of code reviewed with our Code Review product, using a combination of AI and humans. So cool to see a multi disciplinary security community working together and providing insight across the SDLC!
2
2
33
5,427
I'm thrilled to announce the release of Nuclei Templates v9.8.5! This latest version includes some fantastic new AWS cloud review templates. Now, both companies and pentesters can use Nuclei to review AWS cloud configurations effectively. Check it out and let me know what you think! 🔥 Read more about it here: blog.projectdiscovery.io/aws… Additionally, I'm excited to host the "Nuclei-Templates" Discussion at the Hardly Strictly Security Conference on April 25th. We'll cover everything related to Nuclei templates. It’s free to register, so join us! Register here: hardlystrictlysecurity.io/re…
12
68
7,923
Dan Mateer retweeted
HackerOne
@Hacker0x0115 Apr 2024
Make sense of last week’s Sisense breach with HackerOne and learn about best practices to find and mitigate access token exposures. bit.ly/3PYeVKL
1
6
19
9,528
Disney’s buying ads on meta to get shareholder proxy votes and if the creatives look like this I’m all for it (I don’t own $DIS)
1
158
Using @Hacker0x01's AI assistant, you can analyze, extract and transform information from bug report image attachments in seconds ❤️
1
1
5
495
Load more