HackerOne

What do you like best about the product?

The H1 platform helps us keep track of our researchers’ findings.

What do you dislike about the product?

The platform’s navigation makes it difficult to find things if you’re not a regular user.

What problems is the product solving and how is that benefiting you?

The H1 platform helps us to identify vulnerabilities that we may not have known about otherwise.

What do you like best about the product?

Recently, the ability to extract KPIs and metrics from your MCP and APIs has been quite useful. Automatically obtaining critical insights is a big differentiator.

What do you dislike about the product?

Sometimes the notifications create a lot of unnecessary noise, which can be distracting.

What problems is the product solving and how is that benefiting you?

It shows real types of attacks and vulnerabilities that are detected by other tools, but due to a business decision they are exempted.

What do you like best about the product?

Best UI/UX experience, good responses from HAI to correlate the severity

What do you dislike about the product?

The possibility to assign manually scope targets

What problems is the product solving and how is that benefiting you?

The principal problem is It is about having first-hand information on the vulnerabilities of the exposed services

What do you like best about the product?

The biggest benefit is having the entire triage process in one place; from intake and researcher back-and-forth to severity scoring. So things do not get lost. The researcher pool is strong too. They regularly find issues that our automated scans miss.

What do you dislike about the product?

The biggest issue is report quality. Too much triage time goes to filtering low-effort or duplicate submissions before we can focus on valid findings. The platform can also feel slow and clunky when moving between reports, programs, and analytics.

What problems is the product solving and how is that benefiting you?

HackerOne gives us broader vulnerability coverage than relying on internal testing and automated scanning alone. The researcher community helps uncover issues our existing tools can miss, and it’s helpful that reporting and triage stay together in a single workflow.

What do you like best about the product?

It has a very self explanatory UI. I like the H1 triage feature and team, it saves us significant effort of initial triaging, also appreciate direct integrations with ticketing tools to allow auto ticket creation,

What do you dislike about the product?

The AI features can be better, the results from HAI are not always helpful

What problems is the product solving and how is that benefiting you?

H1 platform helps us augment the security testing of our products by inviting external vetted researchers. it allows us to identify security vulnerabilities at a much faster pace

What do you like best about the product?

I really like the way critical and high findings are prioritized. The H1 triage analysts are extremely helpful and genuinely pleasant to work with.

I also appreciate that the platform offers many different ways to pull metrics, which makes it easier to share clear updates with leadership on how the program is progressing.

The researcher community is very large and includes highly talented security researchers from around the world, so it’s easy to find people who can support our program’s specific needs.

Additionally the UI in the platform is very appealing and easy to use (especially in dark mode).

What do you dislike about the product?

The pricing structure (consumption tiers every 50-100K in bounty spend) is the worst part about H1. It makes running a program significantly more difficult and forces us to be very careful when paying researchers and hinders out ability to mature our program. The value that comes from a 50K different in bounty spend is not work the additional cost from the consumption tier. Switching to a unlimited tier structure would be amazing.

The triage time historically has also been quite slow, although recently we have seen large improvements via prioritization of high impact findings.

The support in terms of getting quotes and working with HackerOne folks also has room for improvement. It is a difficult process to work back and forth trying to get renewals/upgrade quote processed.

HAI also hallucinates metrics all the time and will struggle to provide details on where it got the data.

The findings tab should also have the ability to export results across all pages, not just one page at a time. This would make it much easier to generate out own metrics using data we trust.

What problems is the product solving and how is that benefiting you?

They provide everything we need to run our bug bounty program and helps us identify vulns that our other security tooling misses.

What do you like best about the product?

The h1 team help us to validate all the submissions, saving us time and keeping the team focused on tasks and projects that are valuable for our external customers

What do you dislike about the product?

Navigating through the platform and findings is not easy as I would, the communication channels within the findings is also not intuitive.

What problems is the product solving and how is that benefiting you?

It's validating all the potential security vulnerabilities that we don't know of, building trust that we can offer a secure product to our customers.

What do you like best about the product?

Great inbox, great contact with a lot of hackers, i love the metrics sections

What do you dislike about the product?

The UI/UX has a lot to improve, the CVSS calculator is lacking functions as enviromental or temportal scores

What problems is the product solving and how is that benefiting you?

Founding external vulnerabilities

What do you like best about the product?

The control we have over our campaigns and how we can appeal to more researchers.

What do you dislike about the product?

The triage phase has been a bit of an issue but seems to be improving.

What problems is the product solving and how is that benefiting you?

H1 Platform helps me address challenges with finding, organizing, and accessing accurate information more efficiently. It benefits me by cutting down on manual research time, improving visibility into the data, and supporting faster, better-informed decision-making.

What do you like best about the product?

Both the Inbox layout and the Reports layout are well designed. They show me everything I need at a glance so I can take action.

What do you dislike about the product?

Because we have multiple programs, it takes a few extra clicks to get to the correct Inbox with bug bounty reports

What problems is the product solving and how is that benefiting you?

Speaking to the bug bounty program as a whole, it's solving additional vulnerability detection for us