HackerOne

About HackerOne

HackerOne provides an API for organizations running vulnerability disclosure or bug bounty programs. It allows programs to pull vulnerability reports into their own systems, access program information such as settings, balance, and recent transactions, and award bounties to hackers who report vulnerabilities, including for issues found outside HackerOne through the program bounty endpoint.

The API also supports importing findings from external systems or penetration tests into HackerOne, which improves duplicate detection and centralizes reporting alongside vulnerabilities submitted directly through the platform.

This is intended for security teams and organizations that run bug bounty or vulnerability disclosure programs on HackerOne and want to automate report handling, bounty payments, and program management workflows.

Key features

• Pull vulnerability reports from your program into your own systems
• Access and manage program settings, balance, and recent transactions
• Award bounties to hackers for reported vulnerabilities
• Award bounties for vulnerabilities found outside HackerOne via the program bounty endpoint
• Import external findings (e.g. from pentests) to improve duplicate detection and reporting

Frequently asked questions