HackerOne Response (VDP) Reviews & Product Details

I find HackerOne's VDP incredibly valuable. It provides a crucial extension to our limited internal resources, allowing us to leverage the expertise of a vast network of security researchers to identify vulnerabilities we might otherwise miss. Given our recent experience with asset loss highlighting gaps in our security posture, a proactive approach like HackerOne is essential for mitigating risk and improving our overall security. The platform's structured process for vulnerability disclosure and remediation helps us manage and prioritize fixes efficiently, even with limited personnel. It's a cost-effective way to enhance our security program and gain valuable insights from a diverse range of perspectives.

besides, Once in some cases, HackerOne will help you facilitate the working progress between your company and security researchers. Review collected by and hosted on G2.com.

The budget for HackOner is not a big deal for a small company like us :D Review collected by and hosted on G2.com.

HackerOne's main strength is the hacker cohort it comes with, and the ease of rewarding said hackers. We rely on the triage team to handle the noise to separate the real risks from the chaff. HackerOne has extensive API capabilities that are essential to our usage. Review collected by and hosted on G2.com.

HackerOne is only one Bug Bounty vendor, and it's not certain what HackerOne does to attract hackers that have not used HackerOne, or have left in the past. Some functionalities are behind in the times, such as hacker credential issuance functionality, and when new features roll out, they often don't have a "try this new interface" function to get used to the new way things are laid out. The Triage team can be quite lacking in response speed and accuracy, especially with complex risks. Review collected by and hosted on G2.com.

I’ve been using H1 for a while, and one of the things I like is how easy it is to discovery and track of everything. It’s great in the moment to connect our team with security researchers, helping us find vulnerabilities before they turn into potential security incidents. What stands out to me the most is you can customize bounty programs to fit your goals. Review collected by and hosted on G2.com.

H1 is a great platform, but like anything, there’s room for improvement. Setting up a bug bounty program for the first time can feel a bit overwhelming, especially if you’re new to it and not sure where to start. But this is not a pitfall at all honestly. Review collected by and hosted on G2.com.

The new more intuitive interface simplifies vulnerability management and program implementation and setup. We frequently use the platform on an almost daily basis.

We get access to skilled ethical hackers providing diverse insights and detailed vulnerability reports. Love the videos they offer on the hacks. Our developers have been able to intergrate intot he platform quite easily.

Customer service team is proactive, offering personalized advice, and guiding us through setup and any ongoing issues we have.

But primarily h1 enables us to uncover vulnerabilities that other methods can overlook, and thus helps strengthen our overall cybersecurity. Review collected by and hosted on G2.com.

Very little, but i guess some researchers in the last have provided less information than required for Devs to understand the issue and this delays the response from us as we can spend more time researching unfamiliar topics. Review collected by and hosted on G2.com.

We’ve been working with HackerOne to run our responsible vulnerability disclosure and bug bounty programs, and overall, it’s been a great experience.

The H1 triage team has saved my team a lot of time. They’re thorough, reliable, and always ready to assist when needed.

On top of that, HackerOne’s pricing is very competitive, especially for existing customers who want to upgrade their capabilities. Review collected by and hosted on G2.com.

When our account manager changed, we went through a couple of months where support felt a bit lacking on this area. The triage team kept everything on track, but the transition could have been handled more smoothly. Review collected by and hosted on G2.com.

The platform is easy to setup and manage, and backed by a great customer support team.

For sensitive projects, it's also nice that we can handpick our hackers. Review collected by and hosted on G2.com.

The H1 Triage team can be a bit inconsistent at times. Review collected by and hosted on G2.com.

I've been using HackerOne for the past 1.5 years, and my experience has been overwhelmingly positive. As a platform dedicated to cybersecurity and vulnerability management, HackerOne has proven to be an invaluable asset for our organization. Review collected by and hosted on G2.com.

While the platform offers great value, the cost can be a consideration for smaller organizations. Review collected by and hosted on G2.com.

A couple highlights from one year of using their VDP platform:

-Ease of use, easy to navigate and understand the platform

-Customer service team is always available for you

-Their triage team will save you time to review submissions so your teams can work on other stuff

-CSM team provides good recommendations and examples of how to best utilize and strengthen your security Review collected by and hosted on G2.com.

Sometimes you have to request more details from the triage team but my experience has been that your PoC will step in to clarify that with them so its not really an issue. Review collected by and hosted on G2.com.

The HackerOne Triage Team is the most helpful part of the HackerOne platform. The upsides of the HackerOne platform are that it provides an aboveboard security mechanism and reduces risk to your organization. Review collected by and hosted on G2.com.

The least helpful part of the HackerOne platform is the subjectiveness of scoring and payouts. The downsides of the HackerOne platform are that it can cost your organization time and money. Review collected by and hosted on G2.com.

The flexibility to target bounty and VDP scopes on assets as requirements change. Easy to track metrics and payouts as well as other important program information. Great customer support. Review collected by and hosted on G2.com.

They are working on it, but the inbox tracking between researchers to our internal team for the current action that needs to be taken could be simplified. Review collected by and hosted on G2.com.