HackerOne combines AI with the ingenuity of the largest community of security researchers to find and fix security, privacy, and AI vulnerabilities across the SDLC.
Our summaryPlatform connecting organisations with ethical hackers for bug bounty, disclosure programmes and penetration testing.
“HackerOne is the leading provider of bug bounty programs and solutions, empowering organizations to work directly with ethical hackers and secure their assets proactively.”
Managed bug bounty and vulnerability disclosure programmes.
Product page“Expert security researchers to reduce risk, PTaaS to streamline security operations.”
Penetration testing delivered by vetted researchers.
Product pageIndependent tests, peer reviews and articles about HackerOne. We link to them; we did not write or commission them, and nobody pays to appear here.
Stories in our coverage based on what researchers at HackerOne found or reported.
None in our coverage yet.
Stories where a HackerOne product had a vulnerability or was attacked, or HackerOne itself was: 5 in total. Useful if you run its products.
Icarus threat actor leveraged Klue integration to steal data from Salesforce instances of over a dozen companies.
Klue supply chain attack via compromised Salesforce OAuth tokens affects nine cybersecurity firms.
HackerOne, Mazda, Infinite Campus, and Dutch Ministry confirm data breaches exposing employee and partner records.
HackerOne discloses data breach affecting 287 employees after Navia compromise.
| Type | Indicator | Story |
|---|---|---|
| malware | Icarus | BeyondTrust, LastPass Impacted by Klue-Salesforce Incident |
| malware | ShinyHunters | HackerOne, Mazda, Infinite Campus and Dutch Ministry Hit by Data Breaches |
| malware | Navia compromise | ‼️ HackerOne discloses a data breach of 287 employees after Navia was hacked. https://t.co/uLqSY... |
| mitre_attack | Broken Object Level Authorization (BOLA) | HackerOne discloses employee data breach after Navia hack |
Get an email when a reviewed story names HackerOne, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Tell us what to fix on this page: a product, a description, a link or a review. We check every suggestion before changing anything, and listing stays free and editorial.
