HackerOne

What it is

HackerOne is a commercial Continuous Threat Exposure Management platform from HackerOne Inc. It connects organisations with security researchers and agentic AI tooling to discover, validate, prioritise and remediate vulnerabilities through products such as H1 Bounty, H1 Response (vulnerability disclosure), continuous and agentic testing, validation and related code and AI red-teaming offerings.

What it helps with

- Running public, private or invite-only bug bounty programmes so trusted researchers can report real-world vulnerabilities against defined scope.
- Standing up a vulnerability disclosure programme (including a free Essential VDP entry point) so third parties have a structured channel to report issues.
- Centralising report intake, triage, severity prioritisation and workflow into engineering tools, with optional human triage and Hai AI assistance described by the vendor.
- Validating exploitability and reducing duplicate or low-signal findings before remediation work begins.
- Supporting continuous or time-boxed testing (including agentic pentest and AI red-teaming products listed on the site) alongside classic bounty and disclosure programmes.

Who it's for

Security and product security teams that need an organised channel for external vulnerability reports and paid researcher testing, and enterprises building CTEM-style discovery-to-remediation workflows. Not a local vulnerability scanner you install on a laptop.

Worth knowing

Customers define programme scope and policies; customer terms require authorisation for any testing HackerOne or community members perform on third-party or customer assets. Community members are independent third parties, not HackerOne employees. Essential VDP is free; paid products use Order Form fees and optional bounty reward funding. Listing copy summarises public product, docs and legal pages and omits marketing rankings and customer-count claims. Attribution: hackerone.com product and platform pages, docs.hackerone.com, and hackerone.com/terms.