HackerOne Bounty Reviews & Product Details - Page 3

HackerOne offers a comprehensive platform for managing bug bounty programs. The interface is user-friendly, and its features, like vulnerability management and communication tools, are effective. It helps us connect with a diverse pool of security researchers, which has proven beneficial. Review collected by and hosted on G2.com.

While the platform is well-designed, some advanced customization options could be more intuitive and user-friendly. Review collected by and hosted on G2.com.

it has a constant engagement from different people. Review collected by and hosted on G2.com.

not all of the guys are experienced.

it does not replace pentesting but it surely helps.

The interface its not great, its easy to get lost or miss reports. Review collected by and hosted on G2.com.

The flexibility to target bounty and VDP scopes on assets as requirements change. Easy to track metrics and payouts as well as other important program information. Great customer support. Review collected by and hosted on G2.com.

They are working on it, but the inbox tracking between researchers to our internal team for the current action that needs to be taken could be simplified. Review collected by and hosted on G2.com.

The fact that HackerOne employees deal with the hackers first, and they then remediate with us Review collected by and hosted on G2.com.

Sometimes the reaction time is a little slow. Review collected by and hosted on G2.com.

From the bug bounty page customization, detailed analytics page to the number of valid reports we have recieved. Hacker one leaves little to be desired.

It has inspired us with the cofidence we need to deploy secure products and keep our customers protected.

Simply Amazing! Review collected by and hosted on G2.com.

Initially our inability to invite researchers with certain skillsets/interest.

But H1 later rolled out a feature allowing us, So no dislikes. Review collected by and hosted on G2.com.

- Very easy to onboard and setup a program

Large pool of available hackers

- Lots of outreach from customer service to advise on high engagement with program and industry best practices

- Good efforts on de-duplication of bounties submitted Review collected by and hosted on G2.com.

- Triage analysts are often not doing in-depth analysis, requiring a review of their work

- There is no ongoing learning of the program and the environment so analysts can make informed discussions. For the most part, analysts seem to be tackling each bug independently (aside from validating that there are no duplicates)

- Analysts often take longer than the suggested 48 hour time to respond and need follow-ups Review collected by and hosted on G2.com.

Has a good population of hackers, H1 triage service available. Review collected by and hosted on G2.com.

UI is confusing and H1 triage serice can be spotty/breaks SLA. Review collected by and hosted on G2.com.

The community is very large with presence on many countries including china. This is useful for a multinational companies with assets in multiple regions/countries Review collected by and hosted on G2.com.

When your assets become very mature in security posture it is hard to manage the hacker's engagement Review collected by and hosted on G2.com.

Hacker One provides us with researchers that help augment our internal pen testing team with finding bugs in our applications. It's a one stop shop that allows us to have a bug bounty program without having to worry about the infrastructure and recruitment aspects. It also integrates well with Jira, which we love. Review collected by and hosted on G2.com.

Triage can be highly inconsistent both in time it takes to triage and quality of triage. Review collected by and hosted on G2.com.

HackerOne has been a game-changer for our bug bounty program. It’s user-friendly, efficient, and provides a robust platform to manage our program, connect with researchers, and efficiently triage reports. The platform’s features, like vulnerability management and communication tools, are essential for our team’s success. Review collected by and hosted on G2.com.

While the platform is generally excellent, some advanced customization options for program settings could be more intuitive. Review collected by and hosted on G2.com.