Digital Shadows vs. HackerOne

DS is fantastic for big and large-medium companies, it has many very featured functions and works very well. It's a little bit expensive for small and little-medium companies.

Incentivized

It is one of the good platforms for security researchers to submit bugs and other vulnerabilities, it however, has some challenges, in terms of un-verified and duplicate submissions.

Incentivized

• We found company emails used for personal uses.
• We found internal documents in deep web.
• We found news and information about the company managers on social media not delivered by the company.

Incentivized

• Filter for spammy bug reports
• Nice central interface
• Payment/reward system is nice

Incentivized

• I'd like to have still more features for searching on social media.
• I'd like to have a better interface for configuration.
• It's expensive for middle and small companies, I'd like to have a reduced-features version for them.

Incentivized

• A lot of duplicate bugs get reported, although it does offer automatic suggestion of previously reported bugs that may be duplicates, it is far from perfect.
• Anyone can report bugs, a lot of them are not verified before submission. This sometimes leads to a lot of time spent in verifying if the bug is really actionable.
• Each submission has to be treated with equal potential, a lot of time, some time gets invested in vulnerabilities that aren't as important as some others.

Incentivized

Solved the problems of my customers and permitted to clearly demonstrate these problems to management.

Incentivized

It's very easy to use, also non-technical users can understand the information to use for search and results, initial configuration is less easy to configure but just a little.

Incentivized

They are very available and competent, in addition, they used people with a good knowledge of the Italian language that helped very much, especially with the first customer.

Incentivized

As I said: ease of use, scanningg of deep web and social media, results easy to understand and use.

Incentivized

The other product didn't have searches on Social Media.

Incentivized

These were very close and we liked HackerOne better. For a time we did have both and we felt the need to consolidate the information into one platform and end of life our internal offering. Overall we've been fairly happy with HackerOne.

Incentivized

• DS gave more visibility on the company cyber exposure.
• Results of DS searches helped to solve security holes in people's behaviour.
• Company management reached more awareness about company cyber exposure.

Incentivized

• Bugs that can't be tracked internally are submitted by external researchers, which is an important factor for security vulnerabilities.
• Even if the bugs reported are duplicates, there still is provision to award reputation points, that keep the researchers engaged.
• It also requires a lot of verification and validation, as a lot of the submissions are unverified to begin with.

Incentivized