HackerOne pros and cons

4.3 out of 5

5 reviews
85% willing to recommend

Pros & Cons summary

HackerOne offers bug bounty opportunities in a safe environment ideal for beginners, covering mobile, API, and websites, fostering learning and profit. Its reputation surpasses WebCloud and BugCloud, ensuring a smoother process despite slower response speeds and traffic issues, which lead to duplicated reports. Improved triager communication can enhance user experience. Newer researchers receive fewer invites, yet HackerOne remains a leader in providing secure and extensive bug bounty programs.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Get the report

Prominent pros & cons

PROS

Apart from offering bug bounty opportunities, HackerOne provides a safe environment for practice, beneficial for beginners interested in future bug bounties.

HackerOne offers a variety of programs covering different areas such as mobile, API, and websites.

It aids in gaining new sales, profits, and other benefits.

HackerOne's larger size and superior reputation result in a smoother process compared to other platforms like WebCloud and BugCloud.

The variety and depth of HackerOne programs are valuable features for users seeking comprehensive knowledge.

CONS

Traffic issues arise when many people compete for bounties, causing the first reporter to win while others receive no recognition.

Response time can be slow, with the Trust team not utilizing AI to reduce duplicate reports.

Viewing conversations between triagers and programs is currently not possible but would be beneficial.

Overall performance has slowed down significantly.

Older researchers receive more private invites compared to newer ones.

HackerOne Pros review quotes

Hrithik Kumar

SAP Security and GRC Consultant at Skillmine Technology Consulting

May 28, 2024

Apart from getting all the bug bounty opportunities, we also get the chance to practice in a safe environment, like a demo setup. These features are great for beginners who want to explore bug bounties in the future.

Read full review

Faizan Nehal

dApp Auditor at Hacken

Feb 3, 2025

HackerOne is larger than WebCloud and has a better reputation than BugCloud, which results in a smoother process.

Read full review

reviewer2543502

Security Engineer at PhonePe

Sep 16, 2024

It helps me to get new sales, profits, and other benefits.

Free Report: HackerOne Reviews and More

Learn what your peers think about HackerOne. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.

DOWNLOAD NOW

838,640 professionals have used our research since 2012.

Jagdish SM

QA Engineering Lead at Confidential

Aug 30, 2024

The most valuable feature of HackerOne is its variety of programs. These programs provide depth into various areas, such as mobile, API, and websites.

Read full review

HackerOne Cons review quotes

Hrithik Kumar

SAP Security and GRC Consultant at Skillmine Technology Consulting

May 28, 2024

One issue I've experienced is traffic. Many people try to participate when an opportunity with a bounty of around 1,000-15,000 dollars comes up. In this case, the first person to report the vulnerability gets the bounty. If a second person reports the same vulnerability, they are marked as duplicated instead of receiving some recognition. The second person also invested time finding the issue, so I think this can be improved.

Read full review

Faizan Nehal

dApp Auditor at Hacken

Feb 3, 2025

Everything has become slower on HackerOne.

Read full review

reviewer2543502

Security Engineer at PhonePe

Sep 16, 2024

The ability to view the conversation between the triagers and the programs will be really good.

Free Report: HackerOne Reviews and More

Learn what your peers think about HackerOne. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.

DOWNLOAD NOW

838,640 professionals have used our research since 2012.

Jagdish SM

QA Engineering Lead at Confidential

Aug 30, 2024

Response time can be improved. The HackerOne Trust team can be slow to respond sometimes. They're not using AI, which could help reduce the number of duplicate reports.

Read full review