Security research platform · crowdsourced
HackerOne
The largest program catalog - web, mobile, API, and increasingly AI/LLM scope. The default first stop for most hunters.
Overview
Research on HackerOne
Reputation / Signal / Impact stats gate private invites. Start on VDPs (no bounty) to build stats, then get invited to paid private programs.
- Program type
- Bounty · VDP · Pentest
- Regions
- Global
- Payout
- USD via PayPal / Coinbase / bank; per-program bounty tables
Field notes
Practical guidance
- Read Hacktivity (hackerone.com/hacktivity) daily - disclosed reports are the best free methodology source.
- Keep Signal high: low-quality/dupe reports hurt your invite chances more than no reports.
- Filter the directory by 'new programs' - fresh scope has the least-picked-over bugs.
Primary source
Official links
Version history: normalized permanent page created 2026-08-20. Verify current platform terms before testing.