While I've participated in many bug bounty programs over the years, this is the first time I've ran one as the lead. The HackerOne team (Mostly Olivia, our CSM) has made it very easy for me to make this transition, from helping us with key metrics to understand how our program is doing, what we could improve to make it better, and also framing the impact the program has had to our customers and internal stakeholders. Review collected by and hosted on G2.com.

Even after using it for about 2 years now, it is still hard for me to keep where everything is in my head as I find the UI confusing and not intuitively coupled. For example, where your program settings live compared to where your metrics dashboard is. Review collected by and hosted on G2.com.

It helps us coordinate our many repeat yearly pentests into one manageable platform. Review collected by and hosted on G2.com.

The user rights management is one of the convoluted I've ever used, for example I have to assign rights to a new pentest to every individual analyst working on it, every time.

There was also a period where we had a new technical contact ever 2-3 months, with a 3 month span where we just didn't seem to have one. Review collected by and hosted on G2.com.

I would say the ease of use of setting up the Jira Integration as well as other tool integrations to set our entire workflow up to having the findings meet where the teams work. Review collected by and hosted on G2.com.

I would say my biggest dislike would be not having the ability to control asset tiers more natively in our complex programs world we prefer to group by importance and have assets in various groups. Review collected by and hosted on G2.com.

An easy to deploy platform for handling, discovering bugs and vunerabilities from submission to completion. A great community of ethical hackers willing to help us improve our security and us being able to reward them for doing so. Review collected by and hosted on G2.com.

The Zapier API integration capabilities are somewhat limited and would be useful to have more options for webhooks/alerting with 3rd party systems. Review collected by and hosted on G2.com.

We’ve been working with HackerOne to run our responsible vulnerability disclosure and bug bounty programs, and overall, it’s been a great experience.

The H1 triage team has saved my team a lot of time. They’re thorough, reliable, and always ready to assist when needed.

On top of that, HackerOne’s pricing is very competitive, especially for existing customers who want to upgrade their capabilities. Review collected by and hosted on G2.com.

When our account manager changed, we went through a couple of months where support felt a bit lacking on this area. The triage team kept everything on track, but the transition could have been handled more smoothly. Review collected by and hosted on G2.com.

The platform is easy to setup and manage, and backed by a great customer support team.

For sensitive projects, it's also nice that we can handpick our hackers. Review collected by and hosted on G2.com.

The H1 Triage team can be a bit inconsistent at times. Review collected by and hosted on G2.com.

I've been using HackerOne for the past 1.5 years, and my experience has been overwhelmingly positive. As a platform dedicated to cybersecurity and vulnerability management, HackerOne has proven to be an invaluable asset for our organization. Review collected by and hosted on G2.com.

While the platform offers great value, the cost can be a consideration for smaller organizations. Review collected by and hosted on G2.com.

A couple highlights from one year of using their VDP platform:

-Ease of use, easy to navigate and understand the platform

-Customer service team is always available for you

-Their triage team will save you time to review submissions so your teams can work on other stuff

-CSM team provides good recommendations and examples of how to best utilize and strengthen your security Review collected by and hosted on G2.com.

Sometimes you have to request more details from the triage team but my experience has been that your PoC will step in to clarify that with them so its not really an issue. Review collected by and hosted on G2.com.

HackerOne is helping us to improve our products by offering the chance to test them in a controlled environment. The interface is easy to use and the number of features like the campain, spot checks are great. Review collected by and hosted on G2.com.

Triaging is sometimes slow and not accurate. Review collected by and hosted on G2.com.

The HackerOne Triage Team is the most helpful part of the HackerOne platform. The upsides of the HackerOne platform are that it provides an aboveboard security mechanism and reduces risk to your organization. Review collected by and hosted on G2.com.

The least helpful part of the HackerOne platform is the subjectiveness of scoring and payouts. The downsides of the HackerOne platform are that it can cost your organization time and money. Review collected by and hosted on G2.com.