

HackerOne and Wiz operate within cybersecurity and cloud security sectors. HackerOne excels in vulnerability management and security testing, while Wiz offers superior cloud security features.
Features: HackerOne is noted for vulnerability management, centralized report intake, and customizable bug bounty programs. Wiz offers cloud-native capabilities, real-time scanning, and comprehensive cloud security posture management.
Room for Improvement: HackerOne could enhance its interface for more seamless navigation. It may also benefit from increased automation in threat prioritization. An improvement in reporting functionalities for diverse user insights is suggested. Wiz could refine its on-demand scanning efficiency. Greater customization in alert settings might be beneficial. Although strong, its automation capabilities can be further enhanced for user-specific needs.
Ease of Deployment and Customer Service: HackerOne provides efficient setup and responsive support for security teams. Wiz simplifies deployment with automated configuration and strong customer service, ideal for seamless integration into cloud systems.
Pricing and ROI: HackerOne offers competitive pricing with satisfactory ROI through its bug bounty programs. Wiz may have higher initial costs, but these are offset by an extensive return on investment in complex cloud environments due to its comprehensive feature set.
We receive rewards without needing to invest any money, so the return on investment is substantial.
For someone who is starting or in the middle, it is very difficult because you can spend 20 hours sending 20 reports but none of them gets anything.
We have seen ROI from Wiz and we continued to see value in Wiz.
I think we're reaching the point where we'll see a return on investment, and we'll be there by the end of the year.
We estimate a cost reduction of around 35% to 50%, or even more, due to consolidating our security management into one platform.
We have priority support because we are a higher tier, and with high report volumes, the turnaround time is very good.
Technical support at HackerOne has slowed down considerably compared to four years ago.
The ease of collaboration with ethical hackers on HackerOne has been quite good.
On a scale from 1 to 10, I would give Wiz's support a 10.
The vendor was readily available to assist us over calls, clarifying both technical aspects and theoretical insights.
If I were to put Wiz support on a scale from one to ten, I would give them a ten.
It is a large platform with many programs and clients.
HackerOne is very scalable because we can put bounties for any number of hackers at the same time and test thoroughly.
We have deployed Wiz in three organizations on AWS, each with approximately 70 to 80 accounts, totaling more than 120 accounts.
Scalability-wise, I rate the solution a ten out of ten.
Our environment quadrupled in size. We didn’t have to make any adjustments or configuration changes; it just accommodated the growth.
HackerOne was down for some time and the response was not good.
The stability of Wiz has been good, with no downtime, bugs, or glitches.
Stability-wise, I rate the solution an eight to nine out of ten.
The solution is very stable.
There are no clear guidelines for being invited to programs and conferences.
Sometimes new users don't receive invites just because they are new, despite potentially being very skilled hackers, so I feel new users should get more chances and opportunities.
When reporting something, the platform should indicate that it was reported in the previous year or on a specific date, which would give us more insight into what action we have taken on that issue.
We would like to see preventive controls that can be applied through Wiz to protect against vulnerabilities that we're not going to be able to remediate immediately.
One significant area for improvement would be increasing automation. While they excel at identifying issues, we need assistance in minimizing the human hours required for tasks.
It's critical for our team to demonstrate the tool's value.
The cost is rated as one since there is no need to pay anything, not even a fee or commission.
I have not experienced any costs since I use HackerOne independently, just logging into the site, hunting bugs, and submitting them without any expenses.
We are paying 250k per year.
In some cases, it has a very aggressive price, so very cheap.
I don’t think there’s anyone else out there offering the same level, scale, or efficiency.
It has a very simple user interface, and it gives you a quick response—if you submit a bug, someone reaches out to you within minutes, telling you they will verify the bug, and it can be verified in just a few days, sometimes even less than a day, which stands out for me.
HackerOne is a very good platform with the trust of different companies including Shopify, PayPal, and Uber.
HackerOne is larger than WebCloud and has a better reputation than BugCloud, which results in a smoother process.
The ability to scan every layer without agents is a huge selling point because we're multi-agent.
The feature leads to minimal false positives and a low volume of alerts, which is highly valuable for our operations.
It's highly customizable, allowing us to manage many custom features effectively.
| Product | Mindshare (%) |
|---|---|
| Wiz | 5.5% |
| HackerOne | 0.7% |
| Other | 93.8% |


| Company Size | Count |
|---|---|
| Small Business | 6 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 9 |
| Large Enterprise | 23 |
HackerOne leads in offensive security with a platform that expertly identifies and remedies security vulnerabilities using AI and a vast researcher community. Trusted by industry giants, it integrates bug bounties, vulnerability disclosure, and code security in software development.
The HackerOne Platform offers a comprehensive suite of services, combining advanced AI technology with the skills of a global security researcher community to address complex security challenges. It facilitates an understanding of vulnerabilities, promoting better remediation practices across software lifecycles. Notable clients include Anthropic, Crypto.com, General Motors, GitHub, Goldman Sachs, Uber, and U.S. Department of Defense. Recognized for innovation and workplace excellence, HackerOne continues to set standards in security solutions.
What key features does HackerOne offer?HackerOne finds significant applications in various sectors with its focus on vulnerability assessment, testing, and responsible disclosure. Organizations utilize it for ethical hacking and efficient vulnerability coordination, making it essential in cybersecurity strategies. The platform's reliability is evident in its ability to identify and document security threats effectively.
Wiz is a highly efficient solution for data security posture management (DSPM), with a 100% API-based approach that provides quick connectivity and comprehensive scans of platform configurations and workloads. The solution allows companies to automatically correlate sensitive data with relevant cloud context, such as public exposure, user identities, entitlements, and vulnerabilities.This integration enables them to understand data accessibility, configuration, usage, and movement within their internal environments.
Wiz's Security Graph delivers automated alerts whenever risks emerge, allowing teams to prioritize and address the most critical issues before they escalate into breaches. Furthermore, Wiz ensures rapid and agentless visibility into critical data across various repositories, enabling organizations to easily determine the location of their data assets.
Wiz provides various features in the following categories:
Agentless Scanning: The solution can scan every layer of a cloud environment without requiring agents, managing the entire process and providing comprehensive visibility.
Workflow Integration: Users can create customized workflows within Wiz to identify and assign actions based on urgency, integrating them with ticketing systems for quick and efficient remediation.
Vulnerability Management: Wiz's vulnerability management modules provide detailed analytics and visibility across cloud systems, streamlining the manual process of vulnerability discovery. The automated attack path analysis helps identify risks and trace potential points of exposure, allowing users to understand and mitigate them effectively and proactively.
CSPM (Cloud Security Posture Management): Wiz's CSPM module offers instant visibility into high-level risks to an enterprise’s cloud environment, covering all accounts without the need for agents.
Out-of-the-Box Reporting and Custom Queries: The service supports comprehensive reporting with asset context, allowing users to perform complex custom queries on the solution’s user-friendly interface.
Automation Roles and Dashboards: The solution facilitates automation by providing essential roles and dedicated dashboards that enable teams to understand security information quickly, even those with limited expertise.
Contextual Risk Evaluation: The service contextualizes the various components contributing to an issue, providing a risk evaluation framework that helps prioritize remediation efforts.
Security Graph and Visibility: Wiz's security graph offers visibility across the entire organization, even with multiple accounts, enabling users to understand their environment and assets effectively.
Wiz offers the following benefits:
Comprehensive agentless scanning
Effective identification and mitigation of vulnerabilities
Streamlined vulnerability management
Robust reporting capabilities and customizable queries
Enhanced automation and role-based access control
Prioritized risk evaluation for efficient remediation
Security posture across multiple accounts
Kamran Siddique, VP Information Security at boxed.com, remarks his company has seen a ROI while using Wiz, as it simplifies the process by integrating multiple useful tools into one solution.
According to a Senior Security Architect at Deliveroo, Wiz has given their company a fresh approach to vulnerability management, as Wiz's native integrations are extremely useful and paramount to the operational success of their platform.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.