HackerOne Platform Reviews & Product Details

HackerOne Response VDP provides the opportunity for so many security researchers to review your chosen assets and find vulnerabilities for your teams to remediate. These can range from simple insecure SSL findings to larger and critical open doors to passwords, secrets, insecure APIs, etc. The findings we have discovered have been amazing and allowed us to secure our external footprint significantly. Review collected by and hosted on G2.com.

The only downside of using the HackerOne Response VDP is when you go "public". This opens up your program to anyone within the HackerOne program. This means you will get quite a few submissions. Just be prepared for this day and have your teams ready to remediate. Once you get past the opening rush, it should be smooth sailing from there on out and you'll feel better knowing that thousands of researchers are reviewing your external assets looking for vulnerabilities. Review collected by and hosted on G2.com.

Hacker One provides us with researchers that help augment our internal pen testing team with finding bugs in our applications. It's a one stop shop that allows us to have a bug bounty program without having to worry about the infrastructure and recruitment aspects. It also integrates well with Jira, which we love. Review collected by and hosted on G2.com.

Triage can be highly inconsistent both in time it takes to triage and quality of triage. Review collected by and hosted on G2.com.

HackerOne has been a game-changer for our bug bounty program. It’s user-friendly, efficient, and provides a robust platform to manage our program, connect with researchers, and efficiently triage reports. The platform’s features, like vulnerability management and communication tools, are essential for our team’s success. Review collected by and hosted on G2.com.

While the platform is generally excellent, some advanced customization options for program settings could be more intuitive. Review collected by and hosted on G2.com.

The dedicated team that assisted me every step of the way in setting up our program and are always there when new issues arise. They are always ready with advice. The platform is easy to use and very intuitive. Review collected by and hosted on G2.com.

nothing. The platform is easy to use and navigate. Review collected by and hosted on G2.com.

- Easy program management

- Great integrations to make triage and notification easier

- Amazing customer success team and account managers

- Easy to navigate, amazing UI

- Surprisingly high fidelity reports

- New features being implemented constantly Review collected by and hosted on G2.com.

- Some researchers submit spam, however not as frequently as one may expect

- Triage analysts aren't always the most in-depth in their review of submissions Review collected by and hosted on G2.com.

The platform is intuitive to use, has many neat features, and provides a way for researchers to safely disclose vulnerabilities. Customer service has been helpful when we need assistance or have questions about handling specific situations. They have been very helpful in setting things up and trying to increase the number of submissions. Review collected by and hosted on G2.com.

It can sometimes be tricky dealing with the researchers and bounty payouts. Review collected by and hosted on G2.com.

Platform is full featured - good functionality for managing reports, multiple programs, bounties etc

Even for our unusual use-case, the broad hacker community was able to find vulnerabilities and deliver the ROI we were looking for

CSMs are knowledgable and great to work with Review collected by and hosted on G2.com.

Relatively high base-platform fee - moslty offset by the platform/community features Review collected by and hosted on G2.com.

Collaboration and Transparency

Diverse Talent Pool: of hackers Review collected by and hosted on G2.com.

Occasional Communication Gaps:

Despite built-in tools, misunderstandings or delays in communication between researchers and team Review collected by and hosted on G2.com.

HackerOne offers a great platform for bug bounty management. We were able to have a program launched in a snap, get hackers testing our system, and find potential issues. Review collected by and hosted on G2.com.

The quality of the community report can vary. We wanted to improve the signal to noise ratio, which HackerOne did, but it's still far from perfect. Review collected by and hosted on G2.com.

We have been working with HackerOne for pentesting for a few years now and are very happy with all aspects of this program.

The researchers we have worked with are very competent, ask great questions, and generate well written reports.

We’ve worked with a few different pentesting/bounty programs and HackerOne’s pentesting offering is by far our favorite and one we will continue to use in the future.

If this were an eBay review they’d get an A+++++++. Review collected by and hosted on G2.com.

One of the hardest things about any sort of pentesting (HackerOne included) is knowing if the researchers are going to find most of your vulnerabilities. Hacking is hard and sometimes pentesters won't get everything. This is true for bounty programs as well and other pentesting companies. Review collected by and hosted on G2.com.