Name: HackerOne
Rating: 7.6 (12 reviews)
Author: HackerOne

Help Desk

Web and Video Conferencing

Customer Support

Mobile App Development

Development

Classroom Management

Online Learning

Education

Business Intelligence (BI)

Collaboration

Embedded Business Intelligence (BI)

Visual Collaboration

Enterprise

Accounting

Digital Banking

Payment Gateway

Revenue Management

Finance and Accounting

Applicant Tracking

Corporate Learning Management

Corporate Wellness

Employee Engagement

HR Management

Payroll

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

3D Printing

Blockchain-as-a-Service (BaaS)

Cloud Storage

Compliance Consulting

Data Center Infrastructure Management

Data Observability

Desktop Outsourcing

Enterprise Architecture Management

Fraud Detection

Hyper-Converged Infrastructure

IT Professional Services

Industrial IoT

Integration Platform as a Service (iPaaS)

Managed Print

Network Performance Monitoring

Network Security

Operating Systems

Relational Databases

Remote Monitoring and Management

Remote Support

Security Awareness Training

Single Sign-On

Solid State Drives

Voice Recognition

Web Application Firewalls

Information Technology

A/B Testing

Ad Serving & Retargeting

Advertising Agency

All-in-One Marketing

Content Management

Email Marketing

Event Registration

Heatmap and Session Recording

Livestream

Marketing Automation

Social Media Management

Social Media Monitoring

Survey & Forms Building

Swag Management

Web Analytics

Wholesale Marketplace

Marketing

Project Management

Professional Services

Customer Relationship Management (CRM)

eCommerce

Sales

Cloud Computing Security

Security

Commercial Drone

Dealer Management

Equipment Rental

Military and Defense

OSS/BSS (Operations Support/Business Support)

Real Estate

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

Bugcrowd

Bugbounter

Kali Linux

Offensive Security

SentinelOne Singularity

SentinelOne

CrowdStrike Falcon

CrowdStrike

Hackrate

Open Bug Bounty

SafeHats

InstaSafe

Com Olho

HackenProof

Intigriti

NordicDefender Bug Bounty

NordicDefender

Synack

YesWeHack

Assembla

Azure DevOps Server

Azure DevOps Services

Bugzilla

Freshdesk

GitHub

GitLab

HackEDU

Atlassian Jira

Jira Service Management

JupiterOne

Cisco Vulnerability Management

PagerDuty

Phabricator

Redmine

ServiceNow Strategic Portfolio Management

Slack

Splunk Cloud Platform

Splunk App for Infrastructure, or Splunk APM

Sumo Logic

Zendesk Explore

Zendesk Guide

Zendesk Sunshine

### Bug Reporting and Triage
Users generally find HackerOne's bug reporting and triage process to be a key aspect of the platform. While some users appreciate the efficiency and effectiveness of the triage team in validating and addressing reported bugs promptly, others express concerns about occasional delays in bug verification. The platform's bug bounty programs are praised for providing opportunities for bug hunters to showcase their skills and earn rewards for valid vulnerabilities. However, there are instances where users encounter challenges during the bounty transfer process, particularly related to verification procedures. Despite these mixed sentiments, HackerOne remains a popular choice for security researchers seeking to participate in bug bounty programs and contribute to enhancing cybersecurity measures.

### Vulnerability Management
Users consistently highlight HackerOne's efficient handling of security vulnerabilities, praising its ease of use, quick validation for critical issues, and the rare offering of public disclosure. While some express concerns about the initial investment and distribution of rewards to researchers, the overall sentiment leans towards HackerOne being a valuable tool for managing vulnerabilities effectively. The platform's ability to proactively identify and address vulnerabilities before they are exploited is seen as a significant advantage, helping companies enhance their security posture and maintain user trust.

### Cybersecurity Research and Development
User sentiment regarding HackerOne's cybersecurity research and development capabilities is generally positive, with many acknowledging its reputation within the security researchers community. The platform is commended for providing exposure, building skills, and offering a straightforward and effective user interface. However, some users express concerns about the distribution of rewards and the initial investment required to access paid programs, suggesting room for improvement in these areas. Despite these minor drawbacks, HackerOne remains a trusted partner for organizations seeking to enhance their cybersecurity posture through research and development initiatives.

### Security Education and Training
The reviews highlight users' positive experiences with HackerOne's educational resources and training programs for security research and bug hunting. Users appreciate the accessibility and helpfulness of the materials provided, especially for those new to cybersecurity. The platform's capture the flag game is particularly praised for its effectiveness in teaching and applying real hacking techniques in an engaging manner. Additionally, users find the platform user-friendly and efficient in connecting developers and testers, streamlining the bug reporting process and enhancing overall security measures.

Difficulties during verification: Some users have reported difficulties while transferring the bounty and going through the verification process on HackerOne. These challenges have been mentioned by multiple reviewers, indicating a recurring issue that needs to be addressed by HackerOne.

Unsatisfactory response time: The response time of certain programs on HackerOne has been consistently criticized as unsatisfactory by some users. This feedback highlights a need for improvement in terms of speed and efficiency in resolving issues raised by researchers.

Challenges for non-programmers: Users without a background in programming have expressed frustration with getting started on HackerOne, as they found the provided video series to be unhelpful in explaining key concepts. This feedback suggests the need for clearer and more accessible resources to accommodate users with diverse backgrounds and skill sets.

Bug Triage System: Many users have expressed their appreciation for HackerOne's bug triage system, stating that they consistently receive updates on the status of their bug reports within the promised time frame. These timely updates provide users with transparency and reassurance.

Attractive Bug Bounty Programs: Reviewers have highlighted HackerOne's hosting of bug bounty programs with attractive payouts, noting that numerous well-known and reputable companies participate in these programs. This attracts skilled security researchers who are motivated to find vulnerabilities and earn rewards.

User-Friendly Interface: Users commonly find HackerOne easy to work with, emphasizing its user-friendly interface and intuitive design. The platform's usability makes it accessible to both experienced cybersecurity professionals and those new to the field.

HackerOne is a hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be exploited, from the company of the same name in San Francisco. The service is used for vulnerability location, pen testing, bug bounty, and vulnerability triage services.

HackerOne

Bug bounty platforms are software used to deploy bug bounty programs. A bug bounty program is a deal or reward offered for private individuals who manage to find bugs and vulnerabilities in web applications, effectively crowdsourcing flaw and vulnerability management.

Bug Bounty

Bug Bounty Product Demo with HackerOne Co-Founder Michiel Prins

Bug Bounty Hackerone login demo section

Likelihood to Recommend

HackerOne is the global leader in human-powered security. We leverage human ingenuity to pinpoint the most critical security flaws across your attack surface to outmatch cybercriminals. HackerOne’s Attack Resistance Platform combines the most creative human intelligence with the latest artificial intelligence to reduce threat exposure at all stages of the software development lifecycle. From meeting compliance requirements with pentesting to finding novel and elusive vulnerabilities through bug bounty, HackerOne’s elite community of ethical hackers helps organizations transform their businesses with confidence.

Meet HackerOne

This mission means we partner with the global hacker community to surface the most relevant security issues of our customers before they can be exploited by criminals.

HackerOne 2021-07-19 10:35:50

Dynatrace Application Monitoring UNPUBLISHED

Microsoft Visual Studio

Dynatrace

Technical Intern

HackerOne 2016-03-27 21:06:12

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

No easy

No easy way

End user

Customizable interface

Easy to use

Working with large

Beautifully designed

Spam filter

Use interface

Good security

Good service

Home

Bug Bounty Platforms

We've been using HackerOne for a couple of years. It's a good collection point for bugs and discovered vulnerabilities. Having something to help screen and vet but bounty and security researchers is nice, especially with all the fake reports you can get when you publish an external bug bounty program.

Filter for spammy bug reports
Nice central interface
Payment/reward system is nice

I'd like to see a way for the end-user to set a minimum standard so those reporting are better vetted

More time for my team to address concerns and big filter though several things

I used HackerOne as a platform to report and verify security related issues on the website. It was used as part of the Security team. It allowed external security researchers to submit reports to us and was also used as means of tracking the issue and if the issue was a legitimate one, award a bounty. It was the primary medium of communication between the researchers and the department.

Easy to use
Multiple ways to categorize an issue so that it can be reported efficiently.
Gives an easy way to track issue and open issues again if they aren't resolved properly.

A lot of duplicate bugs get reported, although it does offer automatic suggestion of previously reported bugs that may be duplicates, it is far from perfect.
Anyone can report bugs, a lot of them are not verified before submission. This sometimes leads to a lot of time spent in verifying if the bug is really actionable.
Each submission has to be treated with equal potential, a lot of time, some time gets invested in vulnerabilities that aren't as important as some others.

Bugs that can't be tracked internally are submitted by external researchers, which is an important factor for security vulnerabilities.
Even if the bugs reported are duplicates, there still is provision to award reputation points, that keep the researchers engaged.
It also requires a lot of verification and validation, as a lot of the submissions are unverified to begin with.

HackerOne

Overview

What is HackerOne?