HackerOne · August 2026

August, more concentrated: 104 valid across 38 programs, with more depth per target.

August was more concentrated than the rest.

Fewer programs, 38, but 104 valid reports: more depth on each target and less spread. Eight critical and thirty-four high.

I passed through Snapchat, Stripe, TikTok, Epic Games, Valve, Booking.com, Tinder, Hyatt and Malwarebytes.

I liked the month because it shows the other side: the system also digs deep when it stays on a few targets.