HackerOne
HackerOneReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
71 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Great platform for Bug Bounty
What do you like best about the product?
The platform is intuitive to use, has many neat features, and provides a way for researchers to safely disclose vulnerabilities. Customer service has been helpful when we need assistance or have questions about handling specific situations. They have been very helpful in setting things up and trying to increase the number of submissions.
What do you dislike about the product?
It can sometimes be tricky dealing with the researchers and bounty payouts.
What problems is the product solving and how is that benefiting you?
Bridging the gap between researchers and organizations!
Excellent Customer Service
What do you like best about the product?
The dedicated team that assisted me every step of the way in setting up our program and are always there when new issues arise. They are always ready with advice. The platform is easy to use and very intuitive.
What do you dislike about the product?
nothing. The platform is easy to use and navigate.
What problems is the product solving and how is that benefiting you?
HackerOne brokers communication between researchers and our applications. This closes the gap between internal pen testing and what the researchers discover. It adds one more layer of testing to insure security controls are in place.
Great for companies looking to catch live bugs
What do you like best about the product?
- Easy program management
- Great integrations to make triage and notification easier
- Amazing customer success team and account managers
- Easy to navigate, amazing UI
- Surprisingly high fidelity reports
- New features being implemented constantly
- Great integrations to make triage and notification easier
- Amazing customer success team and account managers
- Easy to navigate, amazing UI
- Surprisingly high fidelity reports
- New features being implemented constantly
What do you dislike about the product?
- Some researchers submit spam, however not as frequently as one may expect
- Triage analysts aren't always the most in-depth in their review of submissions
- Triage analysts aren't always the most in-depth in their review of submissions
What problems is the product solving and how is that benefiting you?
Catching live bugs within our product, helping to create a more secure application and reduce bugs/vulnerabilities.
HackerOne Pen Testing
What do you like best about the product?
HackerOne offers a streamlined penetration testing experience, complimented by an intuitive web portal. Tests are easy to start and findings can easily be exported to third-party ticketing systems.
What do you dislike about the product?
The platform uses the same account type for customers and testers, leaving tghe profile page somewhat cluttered for users.
What problems is the product solving and how is that benefiting you?
HackerOne helped us launch an indepth pen test with minimal lead time.
Hackerone Review
What do you like best about the product?
Great for managing bugs from submission to completion.
What do you dislike about the product?
Can be difficult to find and administer the tool until you get used to it.
What problems is the product solving and how is that benefiting you?
Provides us a single place for us to track and monitor our externally reported bugs
Application Security Engineer
What do you like best about the product?
The Platform is very simple and very convenient.
Everyone knows what an H1 is, so it is much easier to start when you create a Program.
The CSMs are very creative and can help you push your program to another level.
Everyone knows what an H1 is, so it is much easier to start when you create a Program.
The CSMs are very creative and can help you push your program to another level.
What do you dislike about the product?
The Triage team not always know your program and this can be tricky cause it will take them much more time to validated or not a new reports.
What problems is the product solving and how is that benefiting you?
It will give us more "eyes," I meant it will give us more exposure to Bug hunters, and they help us to find bugs and at the end to make our company more Secure!
Leader in Bug bounty programs but can use some improvement
What do you like best about the product?
- Very easy to onboard and setup a program
Large pool of available hackers
- Lots of outreach from customer service to advise on high engagement with program and industry best practices
- Good efforts on de-duplication of bounties submitted
Large pool of available hackers
- Lots of outreach from customer service to advise on high engagement with program and industry best practices
- Good efforts on de-duplication of bounties submitted
What do you dislike about the product?
- Triage analysts are often not doing in-depth analysis, requiring a review of their work
- There is no ongoing learning of the program and the environment so analysts can make informed discussions. For the most part, analysts seem to be tackling each bug independently (aside from validating that there are no duplicates)
- Analysts often take longer than the suggested 48 hour time to respond and need follow-ups
- There is no ongoing learning of the program and the environment so analysts can make informed discussions. For the most part, analysts seem to be tackling each bug independently (aside from validating that there are no duplicates)
- Analysts often take longer than the suggested 48 hour time to respond and need follow-ups
What problems is the product solving and how is that benefiting you?
It provides another avenue to find exploitable vulnerabilities, in addition to other programs.
Find your security risks with HackerOne!
What do you like best about the product?
HackerOne Response VDP provides the opportunity for so many security researchers to review your chosen assets and find vulnerabilities for your teams to remediate. These can range from simple insecure SSL findings to larger and critical open doors to passwords, secrets, insecure APIs, etc. The findings we have discovered have been amazing and allowed us to secure our external footprint significantly.
What do you dislike about the product?
The only downside of using the HackerOne Response VDP is when you go "public". This opens up your program to anyone within the HackerOne program. This means you will get quite a few submissions. Just be prepared for this day and have your teams ready to remediate. Once you get past the opening rush, it should be smooth sailing from there on out and you'll feel better knowing that thousands of researchers are reviewing your external assets looking for vulnerabilities.
What problems is the product solving and how is that benefiting you?
There is no automated testing within the HackerOne Response VDP. This program is all human based security researchers looking for vulnerabilities to boost their reputational score within the program. There is a high level of interest and desire from the researchers to find vulnerabilities. This method out performs any automated attack surface management scanning services.
HackerOne is one the best platform to perform penetration testing and vulnerability assessment.
What do you like best about the product?
"The penetration testers on HackerOne's platform are helpful and always ready to guide us at different stages. HackerOne connects organizations with a vast network of highly skilled ethical hackers from around the world. This diverse talent pool ensures a wide range of expertise and perspectives, allowing for comprehensive testing of various attack vectors. The platform facilitates seamless communication and collaboration between organizations and hackers, providing real-time updates, issue tracking, and remediation guidance. This ensures a smooth and efficient testing process."
What do you dislike about the product?
I don't have any particular dislikes about HackerOne. However, I do find the pricing to be a bit on the expensive side.
What problems is the product solving and how is that benefiting you?
HackerOne will conduct testing on our dashboard to identify any vulnerabilities associated with our product. After identifying the vulnerabilities, they will provide us with a 60-day timeline to fix them. Once we have fixed the vulnerabilities, the dashboard will be retested. HackerOne will provide a detailed report on the vulnerabilities and assist us in addressing them.
Platform to eliminate risks
What do you like best about the product?
HackerOne's platform is user-friendly and integrates with productivity tools like Jira and Slack.
Hai (AI Copilot) seems promising, and HackerOne has a talented pool of hackers with diverse skill sets.
Hai (AI Copilot) seems promising, and HackerOne has a talented pool of hackers with diverse skill sets.
What do you dislike about the product?
HackerOne needs to prioritize improving its triage service.
What problems is the product solving and how is that benefiting you?
HackerOne helps in finding security gaps in products and closing them quickly.
showing 41 - 50