Top all-time · #3984
Hacktron AI
Company blog · hacktron.ai/blogsecurityai
Hacktron AI is the company blog at hacktron.ai, writing about security and ai. Since 2025, 18 different Hacker News readers have linked it 22 times, most often “Hacktron Hacks Supabase”. It is still writing: the last post was on 2026-10-30, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
Hacktron AI is a security research blog about vulnerability hunting. HN readers link its SupaPwn post on getting into Lovable's office and helping secure Supabase, and cite the team's track record of finding real vulnerabilities.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Continuous red teaming, PR review and white-box pentests from Hacktron: find and verify exploitable vulnerabilities across your organisation, code changes and applications.
Most-linked posts?
- Hacktron Hacks Supabase3 people · 3 mentions · first linked 2025-11-18
- We Could Have Backdoored Bash2 people · 2 mentions · first linked 2026-10-31
- Claude Opus wrote a Chrome exploit for $2,2832 people · 2 mentions · first linked 2026-04-16
- Executing arbitrary Python code from a comment2 people · 2 mentions · first linked 2025-07-29
What Hacker News says?
Not sure how I can proof this to you but I happen to know that this was not a stunt. This was exactly what the hacktron crew said it was. Maybe the public track record will convince you. They have been consistently finding interesting and impactful vulns. They were all also really capable before Ai was a thing in infosec. Always has been fun to watch. https://www.hacktron.ai/blog
Comment linking /blog
on “Hackers Used Anthropic's Claude to Break into OpenAI”Submitted A heap overflow and SSO misconfiguration to compromise OpenAI internal repos as a story · 491 points
HN discussionAssociated post: https://www.hacktron.ai/blog/supapwn
Comment linking /blog/supapwn
on “SupaPwn: Hacking Our Way into Lovable's Office and Helping Secure Supabase”Submitted Auditing JDBC Drivers at Scale with AI led to 85000 bounty as a story · 17 points
HN discussionSubmitted We Could Have Backdoored Bash as a story · 7 points
HN discussionSubmitted Hacktron Hacks Supabase as a story · 7 points
HN discussionSubmitted Securing Internet-Critical Software: How We Could Have Backdoored Bash as a story · 4 points
HN discussionSubmitted Supabase Breached as a story · 4 points
HN discussionSubmitted Executing arbitrary Python code from a comment as a story · 4 points
HN discussionSubmitted VPNs: The "Most Trusted" Security Tool Until Claude Roasts It in a Weekend as a story · 3 points
HN discussionSubmitted Claude Opus wrote a Chrome exploit for $2,283 as a story · 3 points
HN discussionSubmitted Turning Cluely into Malware as a story · 2 points
HN discussionSubmitted Pwning OpenAI Atlas Through Exposed Browser Internals as a story · 2 points
HN discussionSubmitted Perplexity Comet UXSS as a story · 2 points
HN discussionSubmitted Executing arbitrary Python code from a comment as a story · 2 points
HN discussionSubmitted Here’s How an OpenAI Model Went Rogue and Hacked Hugging Face as a story · 1 points
HN discussionSubmitted Could Modern Code Review Have Prevented Wp2shell? as a story · 1 points
HN discussionSubmitted GPT-5.6 Sol Ultra built a full Chrome V8 exploit chain from patch commits as a story · 1 points
HN discussionSubmitted RCE in VSCode Copilot Chat as a story · 1 points
HN discussionSubmitted Hacktron Review – code reviewer that acts like a security engineer as a story · 1 points
HN discussionSubmitted I Let Claude Opus Write a Chrome Exploit as a story · 1 points
HN discussionSubmitted Vinext: Vibe-Hacking Cloudflare's Vibe-Coded Next.js Replacement as a story · 1 points
HN discussion
