HackerOne vs. SecureBug

HackerOne

SecureBug

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
HackerOne	Score 9.0 out of 10	N/A	HackerOne is a hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be exploited, from the company of the same name in San Francisco. The service is used for vulnerability location, pen testing, bug bounty, and vulnerability triage services.	N/A
SecureBug	Score 0.0 out of 10	N/A	Fully Managed, End-to-End SecureBug provides end-to-end support for every Intelligent Discovery, NGP and Bug bounty program. From pentester selection to vulnerability triage, retesting, and reporting. Real-Time, Vuln View Real-time vuln view and platform-assisted actions help to process findings fast. Leverage crowd minded SBC expertise Triage and Validate- View and…	N/A

Pricing

HackerOne

SecureBug

Editions & Modules

No answers on this topic

Offerings

Pricing Offerings
HackerOne	SecureBug
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Optional

Additional Details

For more information please email www.hackerone.com/contact or find us on the AWS Marketplace: https://aws.amazon.com/marketplace/seller-profile?id=10857e7c-011b-476d-b938-b587deba31cf

—

More Pricing Information

Community Pulse
	HackerOne	SecureBug
Considered Both Products	HackerOne Verified User Anonymous Chose HackerOne These were very close and we liked HackerOne better. For a time we did have both and we felt the need to consolidate the information into one platform and end of life our internal offering. Overall we've been fairly happy with HackerOne. Incentivized Helpful? Jugpreet Talwar Technical Intern Chose HackerOne I haven't used any other products as such but I have read about bugcrowd. Incentivized Helpful?	SecureBug No answer on this topic

User Ratings
	HackerOne	SecureBug
Likelihood to Recommend	7.0 (0 ratings)	- (0 ratings)

User Testimonials
	HackerOne	SecureBug
Likelihood to Recommend	Our security team will never scale like we'd like to do having this had been extremely helpful to manage, address, and payout vulnerabilities reported. I like having one "door" for this and not multiple ways to report stuff Incentivized Verified User Anonymous Read full review	No answers on this topic
Pros	Filter for spammy bug reports Nice central interface Payment/reward system is nice Incentivized Verified User Anonymous Read full review	No answers on this topic
Cons	A lot of duplicate bugs get reported, although it does offer automatic suggestion of previously reported bugs that may be duplicates, it is far from perfect. Anyone can report bugs, a lot of them are not verified before submission. This sometimes leads to a lot of time spent in verifying if the bug is really actionable. Each submission has to be treated with equal potential, a lot of time, some time gets invested in vulnerabilities that aren't as important as some others. Incentivized Jugpreet Talwar Technical Intern Read full review	No answers on this topic
Alternatives Considered	I haven't used any other products as such but I have read about bugcrowd. Incentivized Jugpreet Talwar Technical Intern Read full review	No answers on this topic
Return on Investment	Bugs that can't be tracked internally are submitted by external researchers, which is an important factor for security vulnerabilities. Even if the bugs reported are duplicates, there still is provision to award reputation points, that keep the researchers engaged. It also requires a lot of verification and validation, as a lot of the submissions are unverified to begin with. Incentivized Jugpreet Talwar Technical Intern Read full review	No answers on this topic
ScreenShots