HackerOne

HackerOne is a platform for finding and fixing security weaknesses with a global community of security researchers. Its best-known offering is the bug bounty programme, where researchers test an organisation’s assets and are rewarded for valid vulnerabilities.

Other products include vulnerability disclosure through HackerOne Response, human-led and agentic pentesting, continuous testing, time-boxed Bounty Challenges around a specific objective, AI code security reviews and AI red teaming. Findings are validated to confirm whether they are exploitable, and remediation plans can be linked to the source code. An agentic AI orchestrator, Hai, coordinates these stages. Researchers build their skills and reputation through programmes, challenges, live events and a public leaderboard.

HackerOne is a commercial service; organisations contact the company to set up a programme.