Over the last year, we’ve run a few different programs with H1. One of those was a penetration test to validate new security controls for our login interface. The pen test program was easy to set up, straightforward to pay for, and it was simple to communicate with the researchers assigned to the engagement.

We also get a lot of value from our bug bounty program, which helps us surface some of our most critical, previously overlooked vulnerabilities. Review collected by and hosted on G2.com.

The interface can be confusing at times, depending on which program you’re viewing. Until recently, my biggest frustration with the H1 platform was the billing structure around system tiers and committed spend for paying out vulnerabilities. Even if we went just one dollar over, we would have been forced to upgrade to the next tier. On top of that, we couldn’t integrate our SIEM with hackerone because we didn’t have the enterprise tier. This has since been addressed with the new billing plan. Review collected by and hosted on G2.com.