HackerOne

What do you like best about the product?

It’s easy to use, and it offers numerous qualified researchers, along with new integrations and tools.

What do you dislike about the product?

The report staging system felt a bit complex to understand at first, and it took me some time to get familiar with how it works.

What problems is the product solving and how is that benefiting you?

Getting valuable security reports from well-qualified researchers, along with a third-person perspective on security.

What do you like best about the product?

I've grown to love Hai! It's very helpful when receiving complex reports.

What do you dislike about the product?

The platform can be buggy at times, especially when I’m navigating between our public program and our private program. I also find it difficult to locate certain areas in the UI because there are so many different sections, which can make things feel a bit hard to track down.

What problems is the product solving and how is that benefiting you?

It’s been helping us close gaps in our attack surface. Being able to share findings with teams—along with proof that an issue is actually exploitable—makes it much easier to prioritize and get the finding addressed ASAP.

What do you like best about the product?

The bugs we find have greatly helped strengthen the security of our environment.

What do you dislike about the product?

Sometimes the reports can be a bit difficult to to decipher

What problems is the product solving and how is that benefiting you?

It is finding the bugs in our applications that our devs aren't paying attention to.

What do you like best about the product?

The H1 platform helps us keep track of our researchers’ findings.

What do you dislike about the product?

The platform’s navigation makes it difficult to find things if you’re not a regular user.

What problems is the product solving and how is that benefiting you?

The H1 platform helps us to identify vulnerabilities that we may not have known about otherwise.

What do you like best about the product?

Recently, the ability to extract KPIs and metrics from your MCP and APIs has been quite useful. Automatically obtaining critical insights is a big differentiator.

What do you dislike about the product?

Sometimes the notifications create a lot of unnecessary noise, which can be distracting.

What problems is the product solving and how is that benefiting you?

It shows real types of attacks and vulnerabilities that are detected by other tools, but due to a business decision they are exempted.

What do you like best about the product?

Best UI/UX experience, good responses from HAI to correlate the severity

What do you dislike about the product?

The possibility to assign manually scope targets

What problems is the product solving and how is that benefiting you?

The principal problem is It is about having first-hand information on the vulnerabilities of the exposed services

What do you like best about the product?

The biggest benefit is having the entire triage process in one place; from intake and researcher back-and-forth to severity scoring. So things do not get lost. The researcher pool is strong too. They regularly find issues that our automated scans miss.

What do you dislike about the product?

The biggest issue is report quality. Too much triage time goes to filtering low-effort or duplicate submissions before we can focus on valid findings. The platform can also feel slow and clunky when moving between reports, programs, and analytics.

What problems is the product solving and how is that benefiting you?

HackerOne gives us broader vulnerability coverage than relying on internal testing and automated scanning alone. The researcher community helps uncover issues our existing tools can miss, and it’s helpful that reporting and triage stay together in a single workflow.

What do you like best about the product?

It has a very self explanatory UI. I like the H1 triage feature and team, it saves us significant effort of initial triaging, also appreciate direct integrations with ticketing tools to allow auto ticket creation,

What do you dislike about the product?

The AI features can be better, the results from HAI are not always helpful

What problems is the product solving and how is that benefiting you?

H1 platform helps us augment the security testing of our products by inviting external vetted researchers. it allows us to identify security vulnerabilities at a much faster pace

What do you like best about the product?

I really like the way critical and high findings are prioritized. The H1 triage analysts are extremely helpful and genuinely pleasant to work with.

I also appreciate that the platform offers many different ways to pull metrics, which makes it easier to share clear updates with leadership on how the program is progressing.

The researcher community is very large and includes highly talented security researchers from around the world, so it’s easy to find people who can support our program’s specific needs.

Additionally the UI in the platform is very appealing and easy to use (especially in dark mode).

What do you dislike about the product?

The pricing structure (consumption tiers every 50-100K in bounty spend) is the worst part about H1. It makes running a program significantly more difficult and forces us to be very careful when paying researchers and hinders out ability to mature our program. The value that comes from a 50K different in bounty spend is not work the additional cost from the consumption tier. Switching to a unlimited tier structure would be amazing.

The triage time historically has also been quite slow, although recently we have seen large improvements via prioritization of high impact findings.

The support in terms of getting quotes and working with HackerOne folks also has room for improvement. It is a difficult process to work back and forth trying to get renewals/upgrade quote processed.

HAI also hallucinates metrics all the time and will struggle to provide details on where it got the data.

The findings tab should also have the ability to export results across all pages, not just one page at a time. This would make it much easier to generate out own metrics using data we trust.

What problems is the product solving and how is that benefiting you?

They provide everything we need to run our bug bounty program and helps us identify vulns that our other security tooling misses.

What do you like best about the product?

The h1 team help us to validate all the submissions, saving us time and keeping the team focused on tasks and projects that are valuable for our external customers

What do you dislike about the product?

Navigating through the platform and findings is not easy as I would, the communication channels within the findings is also not intuitive.

What problems is the product solving and how is that benefiting you?

It's validating all the potential security vulnerabilities that we don't know of, building trust that we can offer a secure product to our customers.