Brand

HackerOne

Editorial coverage of HackerOne.

Review publishedNo affiliate relationshipPrivacy & Security

HackerOne is a platform for buying human security research through vulnerability disclosure programmes, bug bounty programmes and scoped penetration tests.

Read our HackerOne review →Visit HackerOne ↗

Company

Who makes HackerOne

HackerOne operates the platform at hackerone.com, connecting organisations with an external community of security researchers and handling programme workflow and reward payment.

Official website: www.hackerone.com ↗

Product

What it actually does

Organisations publish a scope and rules, then receive researcher submissions through managed intake and triage — including duplicate detection, severity assessment and researcher communication — with integrations into issue trackers. Scoped penetration tests delivered by vetted testers produce reports suitable for audits and enterprise security reviews.

Product family

· Vulnerability Disclosure Programme (VDP)
· Bug Bounty (public and private)
· Pentest
· Triage and programme workflow

Use cases

What people hire it for

Running a public or invitation-only bug bounty programme
Publishing a formal vulnerability disclosure route
Commissioning a scoped, reportable penetration test
Triaging inbound security reports without building the workflow in-house
Demonstrating a mature disclosure process to customers and regulators

Platforms

Where it runs

Hosted platformIssue-tracker integrationsProgramme analytics

Security & privacy

HackerOne is a hosted platform with no software to install; what it consumes is triage attention. A scoped pentest report is commonly accepted as audit evidence, whereas a bug bounty generally is not a substitute for a mandated penetration test — confirm with your assessor.