No more typing reviews! Try our Samantha, our new voice AI agent.

HackerOne pros and cons

Vendor: HackerOne

4.2 out of 5

11 reviews
86% willing to recommend

Pros & Cons summary

HackerOne is optimal for beginner penetration testers aspiring to become bug bounty professionals. It efficiently identifies vulnerabilities, saving resources. Programs cover mobile, API, and websites, offering depth in diverse areas. Combining ethical hackers with a structured platform, it manages security vulnerabilities and improves security posture for clients like Shopify and PayPal. However, cost management, triage speed, user report management, and customer support need enhancement, with no AI usage for reducing duplicate reports.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

HackerOne is ideal for beginners in penetration testing aiming to become professionals in bug bounty.

It provides a return on investment by identifying vulnerabilities efficiently, saving money, time, and manpower.

The platform offers a variety of programs covering mobile, API, and websites, valuable for depth in various areas.

Combining a large community of ethical hackers with a structured platform helps organizations efficiently manage security vulnerabilities.

HackerOne improves security posture by enabling faster detection and reducing MTTR, with trusted clients like Shopify, PayPal, and Uber.

CONS

Cost management in HackerOne is difficult to predict, and spending can be hard to forecast.

Triage response time is a significant issue, causing many users to leave HackerOne.

Reports of vulnerabilities by multiple users are not collated, making management challenging.

Customer support requires improvement with instances of being unresponsive.

HackerOne does not use AI to reduce duplicate reports, affecting efficiency.

HackerOne Pros review quotes

Consultant at a manufacturing company with 10,001+ employees

Apr 28, 2026

I notice a return on investment through the group of researchers at HackerOne identifying vulnerabilities, saving us money, time, and manpower, with the efficiency of HackerOne allowing them to accomplish in three to four hours what would take two red teamers a whole day.

Read full review

Senior Software Developer at hireHQ

Jun 14, 2026

One of the biggest strengths is combining a large community of ethical hackers with a structured platform that helps organizations discover, manage, and remediate security vulnerabilities efficiently.

Read full review

Senior ICT Security Consultant at Applied Principles Limited

Oct 29, 2025

The fast verification process impacts my motivation significantly because a quick response keeps me motivated, and if I'm going to try and hunt bugs today, I would appreciate a response within the day or at least within a few days.

Read full review

Free Report: HackerOne Reviews and More

Learn what your peers think about HackerOne. Get advice and tips from experienced pros sharing their opinions. Updated: June 2026.

900,644 professionals have used our research since 2012.

Senior Software Developer at hireHQ

Feb 25, 2026

HackerOne is a very good platform with the trust of different companies including Shopify, PayPal, and Uber, which creates a stronger brand perception and competitive market positioning.

Read full review

QA Engineering Lead at kintsugi

Mar 30, 2026

If you have a very critical vulnerability, some good companies will acknowledge it and pay you accordingly based on severity.

Read full review

Senior Security Professional at Oportun, Inc.

Jan 29, 2026

HackerOne has been the right fit for our current situation from both a functionality and cost-effectiveness perspective.

Read full review

dApp Auditor at Hacken

Feb 3, 2025

HackerOne is larger than WebCloud and has a better reputation than BugCloud, which results in a smoother process.

Read full review

SAP Security and GRC Consultant at Skillmine Technology Consulting

May 28, 2024

Apart from getting all the bug bounty opportunities, we also get the chance to practice in a safe environment, like a demo setup. These features are great for beginners who want to explore bug bounties in the future.

Read full review

reviewer2543502

Security Engineer at a financial services firm with 10,001+ employees

Sep 16, 2024

It helps me to get new sales, profits, and other benefits.

Read full review

Lead Developer at a government with 1,001-5,000 employees

Jun 13, 2016

Using HackerOne has definitely improved the security of my web application, identifying security gaps I didn't realize as a web developer.

Read full review

Show 1 more reviews (out of 11)

HackerOne Cons review quotes

Consultant at a manufacturing company with 10,001+ employees

Apr 28, 2026

Customer support can improve, as there are instances of ghosting that need to be addressed.

Read full review

Senior Software Developer at hireHQ

Jun 14, 2026

However, some things can be improved, such as better report deduplication by automatically identifying duplicate vulnerability reports more accurately.

Read full review

Senior ICT Security Consultant at Applied Principles Limited

Oct 29, 2025

Sometimes new users don't receive invites just because they are new, despite potentially being very skilled hackers, so I feel new users should get more chances and opportunities.

Read full review

Free Report: HackerOne Reviews and More

Learn what your peers think about HackerOne. Get advice and tips from experienced pros sharing their opinions. Updated: June 2026.

900,644 professionals have used our research since 2012.

Senior Software Developer at hireHQ

Feb 25, 2026

However, I reduced my rating by one mark because a proper internal triage team should be in place, not as a replacement for internal security controls.

Read full review

QA Engineering Lead at kintsugi

Mar 30, 2026

Triage response time is a significant issue. The response time and triage speed are not fast enough, and this is causing many people to leave HackerOne.

Read full review

Senior Security Professional at Oportun, Inc.

Jan 29, 2026

One limitation is that if a finding has been reported on HackerOne and was also reported earlier by another user or outsider, the platform is not able to collate that information together.

Read full review

dApp Auditor at Hacken

Feb 3, 2025

Everything has become slower on HackerOne.

Read full review

SAP Security and GRC Consultant at Skillmine Technology Consulting

May 28, 2024

One issue I've experienced is traffic. Many people try to participate when an opportunity with a bounty of around 1,000-15,000 dollars comes up. In this case, the first person to report the vulnerability gets the bounty. If a second person reports the same vulnerability, they are marked as duplicated instead of receiving some recognition. The second person also invested time finding the issue, so I think this can be improved.

Read full review

reviewer2543502

Security Engineer at a financial services firm with 10,001+ employees

Sep 16, 2024

The ability to view the conversation between the triagers and the programs will be really good.

Read full review

Lead Developer at a government with 1,001-5,000 employees

Jun 13, 2016

HackerOne provides a "HackBot" which helps identify other relevant reports, including duplicates, public reports from other companies, etc. However, the functionality is limited and it would be nice to integrate it with broader services offered like auto responses, triggers, etc.

Read full review

Show 1 more reviews (out of 11)