Company record · security vendor
HackerOne
Where HackerOne appears on the record (4)
Every page on CISO Tribune and its network that carries this company, 4 in all.
- In the vendor directory (4)
- CTEM vendors: who they are, what they sell and how CISOs compare them · primary category
- Bug bounty and crowdsourced testing vendors · category
- Penetration testing and red team services vendors · category
- Vulnerability management vendors · category
What the company sells
HackerOne provides a Continuous Threat Exposure Management platform that combines crowdsourced bug bounty programs, penetration testing, vulnerability disclosure management and code security testing. Its product lineup includes H1 Bounty for crowdsourced vulnerability discovery, H1 Agentic Pentest for AI-and-human-led testing, H1 Response for managing disclosed vulnerabilities, and H1 Code for AI-assisted code security review. HackerOne also offers H1 AI Red Teaming, an adversarial testing service for AI systems and models.[1]
- Categories
- Headquarters
- Not established from our sources
- Founded
- Not established from our sources
- Ownership
- Not established from our sources
- CISO on record
- Not yet on our record. Send a verified source
- Website
- hackerone.com
Products and services
Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.
H1 Platform
A platform that continuously discovers, validates, prioritizes and remediates security vulnerabilities.
H1 Bounty
A bug bounty service that connects organizations with external security researchers to find vulnerabilities.
H1 Agentic Pentest
A penetration testing offering that combines AI agents with human testers to evaluate an organization's attack surface.
H1 Response
A vulnerability disclosure program service that manages reports from submission through remediation.
H1 Code
A code security product that pairs AI analysis with human expert validation.
H1 AI Red Teaming
An adversarial testing service aimed at AI systems and models.
Competitors and alternatives
The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of HackerOne's categories, then alphabetical. A list from the record, never a ranking.
On exposure prioritisation and ctem, HackerOne competes with Brinqa, Guardare, Reach Security, Zafran Security, AttackIQ, Nagomi Security, Outpost24, Seemplicity, Tamnoon, XM Cyber and 8 more.
On bug bounty and crowdsourced testing, HackerOne competes with YesWeHack, Synack and Bugcrowd.
On penetration testing and red team services, HackerOne competes with Bishop Fox, Cobalt, Millennium Corporation, NCC Group, REDLattice, Brinqa, Blue Mantis, Synack, AccessIT Group, Beagle Security and 16 more.
On vulnerability management, HackerOne competes with ConnectSecure, Dynatrace, Qualys, Tenable, Brinqa, YesWeHack, Blue Mantis, Guardare, Reach Security, Zafran Security and 20 more.
References
Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.
- [1]NewsroomHackerOne · hackerone.com · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
Last verified November 4, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.
Recorded November 4, 2026 from the references above.
Work for HackerOne? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.
Security leadership
CISO Tribune has not yet recorded who holds the top security seat at HackerOne. We add a seat only from a verified source; if you have one, send it to the desk.
Questions CISOs ask about HackerOne
- What does HackerOne sell?
- HackerOne sells H1 Platform, H1 Bounty, H1 Agentic Pentest, H1 Response, H1 Code and H1 AI Red Teaming. H1 Platform: A platform that continuously discovers, validates, prioritizes and remediates security vulnerabilities. H1 Bounty: A bug bounty service that connects organizations with external security researchers to find vulnerabilities. H1 Agentic Pentest: A penetration testing offering that combines AI agents with human testers to evaluate an organization's attack surface. H1 Response: A vulnerability disclosure program service that manages reports from submission through remediation.
- How does CISO Tribune file HackerOne?
- CISO Tribune files HackerOne under Exposure prioritisation and CTEM, with Bug bounty and crowdsourced testing, Penetration testing and red team services and Vulnerability management as secondary categories.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.