I like how straightforward and practical it is. It makes it easy to work with hackers, keep track of vulnerabilities, and manage everything in one place without it feeling heavy or complicated. It also gives good visibility into what actually matters, which helps when you need to explain things to leadership or prioritize fixes. Review collected by and hosted on G2.com.

For busy programs, the number of notification emails that arrive every morning can be very confusing. It would be really helpful if these updates could be summarized so it’s clearer what’s happening at a glance. Right now, some emails include responses from the HackerOne team, while others are usually responses from our team, and it’s hard to quickly tell them apart. A simple summary would make it much easier to keep everything organized and easy to follow. Review collected by and hosted on G2.com.

I love the quality of the researcher community on the HackerOne Platform. The reports we receive are usually well written and reproducible, which makes our job way easier. It really helps us scale our security testing by allowing external researchers to find issues like IDORs, SSRFs, and logic flaws, which is huge. The triage and payout flow save us a lot of time. Additionally, their team helped with the smooth setup by scoping the program and defining policy. Review collected by and hosted on G2.com.

The dashboard can feel a bit cluttered when you have a lot of reports, and reporting/analytics could be more flexible. Pricing also gets pretty steep as you scale. Custom dashboards and exports are a bit limited. We'd love to slice data by asset, severity, and time more freely, and pull cleaner CSV/API data for our own BI tools. Trend reports across programs would also help. Review collected by and hosted on G2.com.

I like the ease of understanding the report and the triaging done by the HackerOne team. It saves a lot of time for us since the initial triaging is done by them, and then they provide us with a final detailed report that we can work on directly. The expertise from the HackerOne team makes it easier for us to have back and forth questions if we have any technical questions related to the findings. They also coordinate with the researcher, which solves a lot of problems for us. The initial setup was pretty much straightforward and didn't take much time. The guided setup made it easy for us to set up and onboard members. Review collected by and hosted on G2.com.

Nothing in particular. Maybe, yeah. I think probably if HackerOne conducts events where organizations are invited and maybe they can give a walk through about the product and any new features, that would be something useful. Review collected by and hosted on G2.com.

I appreciate that the HackerOne Platform gives us access to some of the top hackers in the world. The platform provides best in class tooling for us to manage their reports. By having top hackers, we are more likely to find serious security issues before adversaries do. Review collected by and hosted on G2.com.

Triage can be slow and painful, or make mistakes because they don't know the product as well as company employees. The premiums to run on the platform can be quite high, especially relative to professional services hours actually given or triage times. Review collected by and hosted on G2.com.

The HackerOne platform provides a clear and structured channel for security researchers to report vulnerabilities, ensuring consistent quality, relevance, and prioritization of submissions. The built-in triage capabilities significantly reduce our internal validation effort, while the centralized communication platform enables reliable, streamlined interaction with researchers without the risk of losing reports due to email filtering issues. Review collected by and hosted on G2.com.

Although the triage process clearly adds value, response times can sometimes be slower than expected, which can cause delays in validation and in the subsequent handling of submissions. Review collected by and hosted on G2.com.

Some of the best researchers in the world are on Hackerone. I’m also impressed with how Hackerone managers work with clients: even though thousands of reports come into the H1 triage queue, if you need to escalate something on a report, the platform managers take action and help get it reviewed. Review collected by and hosted on G2.com.

There’s really nothing to dislike. I understand that, from an H1 triage perspective, when they receive thousands of reports, it’s tough to triage every single one. However, sometimes they leave even a critical vulnerability for a week if we don’t raise the concern with their manager to get it reviewed. Review collected by and hosted on G2.com.

Useful for learning about how companies work in the real world. Review collected by and hosted on G2.com.

I think the user experience could be improved; the fact of having so many things to see and do seems to me to lower the overall performance and cause a kind of visual overwhelm. Review collected by and hosted on G2.com.

excellence service provided by your CSM and the ever improving platform such as HAI and automation are my favourite feature Review collected by and hosted on G2.com.

High pricing and slow response from H1 triage team Review collected by and hosted on G2.com.

I appreciate being connected with a relevant community, which enables us to identify serious and impactful vulnerabilities across our scope. The ticketing interface is quite user friendly, and I found the initial setup of the HackerOne Platform quite easy. Review collected by and hosted on G2.com.

I believe HackerOne should introduce an ACK status to acknowledge the initial review of a report. Review collected by and hosted on G2.com.

I like that the second-tier triager on the HackerOne Platform is quite competent. He’s nearly always right, which saves me many hours because he’s very often right. Review collected by and hosted on G2.com.

The automations are broken, and the early warning system is really trigger happy. Being more reliable—right now, our automations are mostly broken. Ram and HAI issues. Review collected by and hosted on G2.com.