H1 Platform Pricing Overview

I like how straightforward and practical it is. It makes it easy to work with hackers, keep track of vulnerabilities, and manage everything in one place without it feeling heavy or complicated. It also gives good visibility into what actually matters, which helps when you need to explain things to leadership or prioritize fixes. Review collected by and hosted on G2.com.

For busy programs, the number of notification emails that arrive every morning can be very confusing. It would be really helpful if these updates could be summarized so it’s clearer what’s happening at a glance. Right now, some emails include responses from the HackerOne team, while others are usually responses from our team, and it’s hard to quickly tell them apart. A simple summary would make it much easier to keep everything organized and easy to follow. Review collected by and hosted on G2.com.

I really like the way critical and high findings are prioritized. The H1 triage analysts are extremely helpful and genuinely pleasant to work with.

I also appreciate that the platform offers many different ways to pull metrics, which makes it easier to share clear updates with leadership on how the program is progressing.

The researcher community is very large and includes highly talented security researchers from around the world, so it’s easy to find people who can support our program’s specific needs.

Additionally the UI in the platform is very appealing and easy to use (especially in dark mode). Review collected by and hosted on G2.com.

The pricing structure (consumption tiers every 50-100K in bounty spend) is the worst part about H1. It makes running a program significantly more difficult and forces us to be very careful when paying researchers and hinders out ability to mature our program. The value that comes from a 50K different in bounty spend is not work the additional cost from the consumption tier. Switching to a unlimited tier structure would be amazing.

The triage time historically has also been quite slow, although recently we have seen large improvements via prioritization of high impact findings.

The support in terms of getting quotes and working with HackerOne folks also has room for improvement. It is a difficult process to work back and forth trying to get renewals/upgrade quote processed.

HAI also hallucinates metrics all the time and will struggle to provide details on where it got the data.

The findings tab should also have the ability to export results across all pages, not just one page at a time. This would make it much easier to generate out own metrics using data we trust. Review collected by and hosted on G2.com.