HackerOne Guide for Researchers

HackerOne hosts a wide variety of programs – from classic web applications to mobile, API, hardware and selected Web3 targets. Reputation, clear reporting and consistent triage responses matter a lot on this platform.

Program Types

• Public programs – open to all researchers
• Private / invitation-only programs – higher average rewards, limited access
• Vulnerability Disclosure Programs (VDP) – often lower or no monetary reward

Report Quality Tips

• Reproduce reliably and document every step
• Explain impact in business terms, not only technical jargon
• Include proof-of-concept carefully within the rules
• Respond quickly and professionally to triage questions

Monitoring Value

Even on HackerOne, many programs link to public repositories or release notes. Tracking commits and new assets helps you notice scope expansions and freshly shipped features before they become crowded.

See also: Platforms Overview · Best Practices