It's not really about the platform but the service, HackerOne is probably the most well-known bug bounty platform, the experience (both on the researcher and the "business" side) is very well curated and there is no substitute for the amount of visibility that this service will give to your bug-bounty program. Review collected by and hosted on G2.com.

Nothing really to dislike here but sometimes the triaging workflow is a bit clunky and we had a couple of bugs with notifications but none of these problems really affected the service in a major way Review collected by and hosted on G2.com.

Easily the largest and most reliable bug bounty platform on the market.

The support over the years has been next to none in the industry. We consistently gotten good feedback, support, and feature enhanced. Review collected by and hosted on G2.com.

At times scale of any platform can be difficult to manage and the UI has gone through upgrades. over the years but this is offset but very good customer support. Review collected by and hosted on G2.com.

The Platform is very simple and very convenient.

Everyone knows what an H1 is, so it is much easier to start when you create a Program.

The CSMs are very creative and can help you push your program to another level. Review collected by and hosted on G2.com.

The Triage team not always know your program and this can be tricky cause it will take them much more time to validated or not a new reports. Review collected by and hosted on G2.com.

it has a constant engagement from different people. Review collected by and hosted on G2.com.

not all of the guys are experienced.

it does not replace pentesting but it surely helps.

The interface its not great, its easy to get lost or miss reports. Review collected by and hosted on G2.com.

The flexibility to target bounty and VDP scopes on assets as requirements change. Easy to track metrics and payouts as well as other important program information. Great customer support. Review collected by and hosted on G2.com.

They are working on it, but the inbox tracking between researchers to our internal team for the current action that needs to be taken could be simplified. Review collected by and hosted on G2.com.

The fact that HackerOne employees deal with the hackers first, and they then remediate with us Review collected by and hosted on G2.com.

Sometimes the reaction time is a little slow. Review collected by and hosted on G2.com.

From the bug bounty page customization, detailed analytics page to the number of valid reports we have recieved. Hacker one leaves little to be desired.

It has inspired us with the cofidence we need to deploy secure products and keep our customers protected.

Simply Amazing! Review collected by and hosted on G2.com.

Initially our inability to invite researchers with certain skillsets/interest.

But H1 later rolled out a feature allowing us, So no dislikes. Review collected by and hosted on G2.com.

"The penetration testers on HackerOne's platform are helpful and always ready to guide us at different stages. HackerOne connects organizations with a vast network of highly skilled ethical hackers from around the world. This diverse talent pool ensures a wide range of expertise and perspectives, allowing for comprehensive testing of various attack vectors. The platform facilitates seamless communication and collaboration between organizations and hackers, providing real-time updates, issue tracking, and remediation guidance. This ensures a smooth and efficient testing process." Review collected by and hosted on G2.com.

I don't have any particular dislikes about HackerOne. However, I do find the pricing to be a bit on the expensive side. Review collected by and hosted on G2.com.

- Very easy to onboard and setup a program

Large pool of available hackers

- Lots of outreach from customer service to advise on high engagement with program and industry best practices

- Good efforts on de-duplication of bounties submitted Review collected by and hosted on G2.com.

- Triage analysts are often not doing in-depth analysis, requiring a review of their work

- There is no ongoing learning of the program and the environment so analysts can make informed discussions. For the most part, analysts seem to be tackling each bug independently (aside from validating that there are no duplicates)

- Analysts often take longer than the suggested 48 hour time to respond and need follow-ups Review collected by and hosted on G2.com.

Has a good population of hackers, H1 triage service available. Review collected by and hosted on G2.com.

UI is confusing and H1 triage serice can be spotty/breaks SLA. Review collected by and hosted on G2.com.