HackerOne

HackerOne is a security platform that connects companies with security researchers. It runs bug bounty programs, vulnerability disclosure and penetration testing.

Companies use HackerOne to receive reports of security issues from outside researchers, pay rewards for valid findings and track fixes. The platform also offers validation of exploitability, remediation planning and AI-assisted testing. A researcher side includes leaderboards, events and learning content for people who hunt bugs.

• Run bug bounty and vulnerability disclosure programs
• Access to a community of security researchers
• Pentesting with AI agents and human experts
• AI red teaming for AI systems and models
• Fix plans delivered to engineering teams

HackerOne suits security teams and software companies that want to handle vulnerability reports in an organized way. An individual developer with one small app may not need a managed program.

HackerOne is a commercial platform for organizations. Researchers can join the community to take part in programs, and companies should contact the vendor for plan options. Programs need clear scope rules and a plan for triage, so set those up before you open a program to the public.