HackerOne

Informational

HackerOne

Definition

HackerOne is the world's largest bug bounty platform, connecting organizations with a global community of ethical hackers. Companies publish programs with defined scopes and rewards, and researchers report vulnerabilities in exchange for payouts ranging from €50 to more than €100,000. HackerOne also offers Vulnerability Disclosure Programs (VDP) and managed pentesting.

Impact

Access to bug bounty programs from companies like Google, Microsoft, GitHubRewards of up to €100,000+ for critical vulnerabilitiesA reputation system that unlocks access to private programsA safe platform with legal protection (Safe Harbor) for researchersA global community with live events (H1-3xx) and CTFs

Examples

How to get started on HackerOne

1) Create an account on hackerone.com. 2) Complete your profile and set up 2FA. 3) Explore public programs filtering by asset type and reward. 4) Read each program's policy and scope carefully. 5) Start with VDP programs (no monetary reward) to gain experience and reputation. 6) Study publicly disclosed reports (Hacktivity) to learn which kinds of bugs get paid.

External references

HackerOne Hacktivity - Public reports

Related terms

Bugcrowd

Intigriti

YesWeHack

Bug Bounty

Responsible Disclosure

Practice HackerOne with real labs

Apply what you've learned in safe environments based on real bug bounty reports.

See practice labs

hunters training: 712
labs from real reports: 55
completions: 1,206
in bounties practiced: $213,970

46 flags captured this week·Real reports from HackerOne · Bugcrowd · Intigriti·No commitment·Free Academy

BBLabs · bug bounty training

Stop reading about bugs and start hunting them

Create your free account and practice on labs based on real reports that paid out thousands of euros. The Academy is free forever.

Create free account See the labs

No card · free Academy · cancel anytime