TrustRadius
San Francisco-based HackerOne offers a bug bounty platform, for vulnerability management.https://dudodiprj2sv7.cloudfront.net/product-logos/nI/Kq/N67D70P6ZDN8.pngHackerOne experience.I used HackerOne as a platform to report and verify security related issues on the website. It was used as part of the Security team. It allowed external security researchers to submit reports to us and was also used as means of tracking the issue and if the issue was a legitimate one, award a bounty. It was the primary medium of communication between the researchers and the department.,Easy to use Multiple ways to categorize an issue so that it can be reported efficiently. Gives an easy way to track issue and open issues again if they aren't resolved properly.,A lot of duplicate bugs get reported, although it does offer automatic suggestion of previously reported bugs that may be duplicates, it is far from perfect. Anyone can report bugs, a lot of them are not verified before submission. This sometimes leads to a lot of time spent in verifying if the bug is really actionable. Each submission has to be treated with equal potential, a lot of time, some time gets invested in vulnerabilities that aren't as important as some others.,9,Bugs that can't be tracked internally are submitted by external researchers, which is an important factor for security vulnerabilities. Even if the bugs reported are duplicates, there still is provision to award reputation points, that keep the researchers engaged. It also requires a lot of verification and validation, as a lot of the submissions are unverified to begin with.,,Visual Studio.NET, Dynatrace
Unspecified
HackerOne
3 Ratings
Score 8.0 out of 101
TRScore

HackerOne Reviews

HackerOne
3 Ratings
Score 8.0 out of 101
Show Filters 
Hide Filters 
Filter 3 vetted HackerOne reviews and ratings
Clear all filters
Overall Rating
Reviewer's Company Size
Last Updated
By Topic
Industry
Department
Experience
Job Type
Role
Reviews (1-1 of 1)
  Vendors can't alter or remove reviews. Here's why.
Jugpreet Talwar profile photo
March 28, 2016

User Review: "HackerOne experience."

Score 9 out of 10
Vetted Review
Verified User
Review Source
I used HackerOne as a platform to report and verify security related issues on the website. It was used as part of the Security team. It allowed external security researchers to submit reports to us and was also used as means of tracking the issue and if the issue was a legitimate one, award a bounty. It was the primary medium of communication between the researchers and the department.
  • Easy to use
  • Multiple ways to categorize an issue so that it can be reported efficiently.
  • Gives an easy way to track issue and open issues again if they aren't resolved properly.
  • A lot of duplicate bugs get reported, although it does offer automatic suggestion of previously reported bugs that may be duplicates, it is far from perfect.
  • Anyone can report bugs, a lot of them are not verified before submission. This sometimes leads to a lot of time spent in verifying if the bug is really actionable.
  • Each submission has to be treated with equal potential, a lot of time, some time gets invested in vulnerabilities that aren't as important as some others.
It is one of the good platforms for security researchers to submit bugs and other vulnerabilities, it however, has some challenges, in terms of un-verified and duplicate submissions.
Read Jugpreet Talwar's full review

HackerOne Scorecard Summary

About HackerOne

San Francisco-based HackerOne offers a bug bounty platform, for vulnerability management.
Categories:  Bug Bounty

HackerOne Technical Details

Operating Systems: Unspecified
Mobile Application:No