Hackerone

Name: Hackerone
Brand: Hackerone
Rating: 4.4 (146 reviews)

Leader

A global leader in offensive security solutions.

Est 2012|Valuation $829M|Raised $159.4M|59 Ref Customers

LinkedIn 363K|Web traffic 3.1M|FTEs 700|HQ San Francisco, California, US

MarketsVulnerability Management Application Security Testing (AST)Cloud-Native Application Protection Platform (CNAPP)Web Application & API Protection (WAAP)

Direct competitors and differentiators: - Bugcrowd emphasizes managed VDP packages and references for compliance use cases. - Intigriti emphasizes packaging clarity and operational services, with a focus on European operations. Feature comparison (high level): - HackerOne is commonly perceived as providing a large researcher community and a broad set of offerings across disclosure programs, bounties, and managed testing. - Alternatives may emphasize different trade-offs such as faster triage in some anecdotal reports, packaging clarity, or cost predictability. Pricing comparison: - All three vendors typically use quote-based enterprise pricing. - Some competitors publish more packaging detail than others; buyers should request updated pricing documents and contract terms. Market adoption trends: - The crowdsourced security market is contending with increased volumes of low-quality or automated submissions, prompting program adjustments by some projects.

01Competitive Landscape

Narrative analysis

Direct competitors and differentiators:

Bugcrowd emphasizes managed VDP packages and references for compliance use cases.
Intigriti emphasizes packaging clarity and operational services, with a focus on European operations.

Feature comparison (high level):

HackerOne is commonly perceived as providing a large researcher community and a broad set of offerings across disclosure programs, bounties, and managed testing.
Alternatives may emphasize different trade-offs such as faster triage in some anecdotal reports, packaging clarity, or cost predictability.

Pricing comparison:

All three vendors typically use quote-based enterprise pricing.
Some competitors publish more packaging detail than others; buyers should request updated pricing documents and contract terms.

Market adoption trends:

The crowdsourced security market is contending with increased volumes of low-quality or automated submissions, prompting program adjustments by some projects.

	HackerOne	Bugcrowd	Intigriti
Starting Price	Not publicly listed (quote-based common)	Pricing largely quote-based; VDP plans contact sales	Request pricing (packages listed, not publicly priced)
Recommended for	Enterprises requiring access to a large researcher community, program management features, and managed services including AI-focused testing capabilities	Organizations seeking managed VDP and government-focused packaging	Organizations seeking transparent packaging claims and European footprint
Key Strength	Large researcher community and a range of platform and managed services (bug bounty, VDP, PTaaS, AI-focused testing)	Emphasis on managed VDP offerings and service catalog	Emphasis on packaging clarity and operational triage support
Key Weakness	Reported issues with triage speed and inbound noise; public pricing is not fully transparent	Pricing opacity and outcomes dependent on program setup	Pricing is quote-based; perceived community size may be smaller