What is HackerOne?
HackerOne is a security platform that connects organizations with security researchers. Its documentation distinguishes program types: private and public programs, parent/child programs, vulnerability disclosure programs (VDP) and bug bounty programs (BBP). A disclosure program needs a clear scope and response process, and a bounty program adds reward rules.
The platform's current product lines include H1 Response for always-on vulnerability disclosure, H1 Bounty, where elite researchers look for critical vulnerabilities, H1 Validation to confirm exploitability, H1 Remediation with fix plans for engineering, and H1 AI Red Teaming for adversarial testing of AI systems. A public API lets customers pull program reports into their own systems and award bounties.
The company was founded in 2012 and is based in San Francisco. Define scope, safe-harbor language and internal ownership before inviting submissions.
Key capabilities
- Program setup Vulnerability disclosure or bug bounty programs, public or private.
- Report handling Intake of researcher findings through H1 Response.
- Validation Confirmation of exploitability in your environment.
- Remediation Fix plans delivered to engineering.
- API Pull reports into your systems and award bounties.
Where HackerOne fits
- H1 Response Always-on vulnerability disclosure that runs from the first report to remediated risk.
- H1 Bounty Elite security researchers look for an organization's most critical vulnerabilities.
- H1 Validation Filters noise and confirms exploitability in your own environment.
- H1 Remediation Fix plans informed by source code and delivered straight to engineering.
- H1 Continuous Testing Pentest-grade signal across the attack surface, delivered continuously, with H1 Agentic Pentest combining AI agents and human experts.
- H1 AI Red Teaming Adversarial testing for AI systems and models.
- H1 Code AI code security with human expert validation built in.
- Hai An agentic AI orchestrator that runs continuously across every stage of the platform.
Reviews of HackerOne
Be the first to share your experience with HackerOne.
Write a review
Loading review form…
Alternatives to HackerOne
Bishop FoxBishop Fox is an offensive security company offering penetration testing, Continuous Security Testing delivered on its Cosmos platform and portal, red team exercises and AI security testing, and it publishes open-source tools such as Sliver and CloudFox.
BugcrowdBugcrowd runs bug bounty, vulnerability disclosure and penetration-testing-as-a-service programs through a managed platform and vetted researcher community.
Trail of BitsTrail of Bits is a security firm doing audits and research in cryptography, blockchain, AI/ML and application security, with 200+ open-source repos.