HackerOne

HackerOne is a cybersecurity company founded in 2012 and headquartered in San Francisco, United States. It built a platform connecting organizations with a global community of security researchers to find and fix vulnerabilities before attackers can exploit them.

The platform combines crowdsourced bug bounty programs, AI-assisted penetration testing, continuous vulnerability testing, and vulnerability disclosure programs, and validates and prioritizes reported issues for remediation teams. It is used by more than 1,300 organizations across financial services, healthcare, retail, and the public sector, including companies such as Salesforce, PayPal, and IBM, and has driven the discovery of over 600,000 vulnerabilities.

1. Bug Bounty Programs (H1 Bounty): Crowdsources vulnerability discovery from a global researcher community.

2. Agentic Penetration Testing: Combines AI agents with human researchers to run on-demand pentests.

3. Continuous Testing: Provides ongoing vulnerability scanning between formal assessments.

4. Vulnerability Validation: Confirms and triages reported issues before they reach engineering teams.

5. Vulnerability Disclosure Program: Gives external researchers a structured channel to report issues.

6. AI Red Teaming: Runs adversarial testing against customers' AI models and applications.