"Being able to have issues retested during the same engagement is a game-changer. That’s something that hasn’t been available in the past because traditionally, you didn’t receive the results of a penetration test until after the engagement was over."
"Using HackerOne saves our security team a large amount of time, but more importantly, it also saves our finance team a lot of trouble. Moving to the HackerOne platform allowed us to automate away all of the financial burdens, which are significant."
"Security bugs are going to be reported and they’re going to throw a wrench in your plans for the sprint/ month/quarter."
“If you're going into a bush blind, you don't know what's going to happen.”
"HackerOne has been much more successful at finding problems than general penetration tests have been for us."
“The third party inspection of code adds a layer of confidence to ownCloud’s over 8M users and administrators. Enterprises know their deployment has undergone the rigors of ownCloud QA, their own testing, and the bounty-driven testing of security experts resulting in more secure file sharing for many environments.”
“We plan to increase the size of our bug bounties. I am confident that HackerOne’s community of hackers will continue rising to the challenge.”
"We need to move to a world. Where all companies providing internet services and devices adhere to a vulnerability disclosure policy."
"We take advantage of the triaging services to help with our workload."
"The flexibility of the platform and depth of the HackerOne community has made it a perfect fit for GoodRx."
"With HackerOne and their triage services we now have a sturdy database with ticketing capabilities. Here at AlienVault we’ve also taken advantage of their 3rd party ticketing system integration so once the triage team deems a ticket both a valid vulnerability and not a duplicate, we create a ticket directly in our ticketing system with all pertinent information. Bi-directional communications go through our ticketing system, ensuring nothing is lost or accidentally forgotten."
"A vulnerability disclosure program with bug bounties signaled LocalTapiola reaching a new level of security sophistication, not only in the financial services arena, but in the wider cyber security world too."
"HackerOne is a well-known platform across the information security community which aggregates the most successful bug bounty programs to date."
"HackerOne also played a crucial role in cutting down the noise so we could focus only on the valid issues."
"We tried pen testing before and found it very expensive and practically useless. The first week we launched HackerOne they found several high priority bugs. Huge value at the fraction of the costs."