HackerOne Pentest Reviews & Product Details

I find HackerOne's VDP incredibly valuable. It provides a crucial extension to our limited internal resources, allowing us to leverage the expertise of a vast network of security researchers to identify vulnerabilities we might otherwise miss. Given our recent experience with asset loss highlighting gaps in our security posture, a proactive approach like HackerOne is essential for mitigating risk and improving our overall security. The platform's structured process for vulnerability disclosure and remediation helps us manage and prioritize fixes efficiently, even with limited personnel. It's a cost-effective way to enhance our security program and gain valuable insights from a diverse range of perspectives.

besides, Once in some cases, HackerOne will help you facilitate the working progress between your company and security researchers. Review collected by and hosted on G2.com.

The budget for HackOner is not a big deal for a small company like us :D Review collected by and hosted on G2.com.

HackerOne’s most helpful feature is its streamlined interface for managing bug bounties and coordinating with skilled ethical hackers. The platform enables us to submit, track, and prioritise vulnerabilities with ease, while detailed reporting helps our engineers to understand and fix issues quickly. Additionally, the platform’s vast network of researchers offers a diverse range of expertise, uncovering security gaps that might be missed in-house.

The key upsides of using HackerOne are the broad vulnerability coverage and the in-depth metrics that help us demonstrate program impact and effectiveness. The support from HackerOne’s team make the ongoing management of our program are seamless. Review collected by and hosted on G2.com.

Honestly, nothing. It is every improving and adding features, making it easier. New addition of Ai integration has made things faster for us too. Review collected by and hosted on G2.com.

The new more intuitive interface simplifies vulnerability management and program implementation and setup. We frequently use the platform on an almost daily basis.

We get access to skilled ethical hackers providing diverse insights and detailed vulnerability reports. Love the videos they offer on the hacks. Our developers have been able to intergrate intot he platform quite easily.

Customer service team is proactive, offering personalized advice, and guiding us through setup and any ongoing issues we have.

But primarily h1 enables us to uncover vulnerabilities that other methods can overlook, and thus helps strengthen our overall cybersecurity. Review collected by and hosted on G2.com.

Very little, but i guess some researchers in the last have provided less information than required for Devs to understand the issue and this delays the response from us as we can spend more time researching unfamiliar topics. Review collected by and hosted on G2.com.

It helps us coordinate our many repeat yearly pentests into one manageable platform. Review collected by and hosted on G2.com.

The user rights management is one of the convoluted I've ever used, for example I have to assign rights to a new pentest to every individual analyst working on it, every time.

There was also a period where we had a new technical contact ever 2-3 months, with a 3 month span where we just didn't seem to have one. Review collected by and hosted on G2.com.

I would say the ease of use of setting up the Jira Integration as well as other tool integrations to set our entire workflow up to having the findings meet where the teams work. Review collected by and hosted on G2.com.

I would say my biggest dislike would be not having the ability to control asset tiers more natively in our complex programs world we prefer to group by importance and have assets in various groups. Review collected by and hosted on G2.com.

"The penetration testers on HackerOne's platform are helpful and always ready to guide us at different stages. HackerOne connects organizations with a vast network of highly skilled ethical hackers from around the world. This diverse talent pool ensures a wide range of expertise and perspectives, allowing for comprehensive testing of various attack vectors. The platform facilitates seamless communication and collaboration between organizations and hackers, providing real-time updates, issue tracking, and remediation guidance. This ensures a smooth and efficient testing process." Review collected by and hosted on G2.com.

I don't have any particular dislikes about HackerOne. However, I do find the pricing to be a bit on the expensive side. Review collected by and hosted on G2.com.

Collaboration and Transparency

Diverse Talent Pool: of hackers Review collected by and hosted on G2.com.

Occasional Communication Gaps:

Despite built-in tools, misunderstandings or delays in communication between researchers and team Review collected by and hosted on G2.com.

HackerOne offers a great platform for bug bounty management. We were able to have a program launched in a snap, get hackers testing our system, and find potential issues. Review collected by and hosted on G2.com.

The quality of the community report can vary. We wanted to improve the signal to noise ratio, which HackerOne did, but it's still far from perfect. Review collected by and hosted on G2.com.

We have been working with HackerOne for pentesting for a few years now and are very happy with all aspects of this program.

The researchers we have worked with are very competent, ask great questions, and generate well written reports.

We’ve worked with a few different pentesting/bounty programs and HackerOne’s pentesting offering is by far our favorite and one we will continue to use in the future.

If this were an eBay review they’d get an A+++++++. Review collected by and hosted on G2.com.

One of the hardest things about any sort of pentesting (HackerOne included) is knowing if the researchers are going to find most of your vulnerabilities. Hacking is hard and sometimes pentesters won't get everything. This is true for bounty programs as well and other pentesting companies. Review collected by and hosted on G2.com.

HackerOne offers a streamlined penetration testing experience, complimented by an intuitive web portal. Tests are easy to start and findings can easily be exported to third-party ticketing systems. Review collected by and hosted on G2.com.

The platform uses the same account type for customers and testers, leaving tghe profile page somewhat cluttered for users. Review collected by and hosted on G2.com.