HackerOne

Profile narrative

HackerOne is a United States-based organisation that operates a platform designed to connect businesses with the security research community, facilitating vulnerability disclosure and bug bounty programmes. The platform enables organisations to receive reports from external security researchers who test their systems for vulnerabilities, supporting coordinated disclosure and remediation workflows. As a recognised player in the cybersecurity sector, HackerOne serves a customer base that includes other cybersecurity vendors and enterprises seeking to manage external security testing in a structured manner. The organisation's scope places it at the intersection of crowdsourced security testing and vulnerability management, a niche that has become increasingly important as organisations face persistent pressure to identify and address software weaknesses before they can be exploited.

HackerOne's footprint is reflected in the range of customers identified in connection with a third-party platform breach in June 2026, where the Icarus threat group exfiltrated business contact information, customer support case data and sales-related data from several cybersecurity firms linked to the affected integration. The fact that HackerOne, alongside Recorded Future, Tanium, LastPass, Snyk, Jamf, OneTrust and Gong, was among the impacted customers suggests the platform serves a notable cross-section of the cybersecurity industry. Beyond this, HackerOne itself was the subject of a separate data breach in March 2026, in which social security numbers and health-related details were reported as exposed in an incident tied to San Francisco, California. These two incidents highlight the organisation's dual position as both a provider of cybersecurity services and a holder of sensitive personal data, underscoring the breadth of information that flows through vulnerability disclosure platforms.

The organisation is distinguished by its specialisation in crowdsourced security testing, a model that relies on engaging independent researchers to probe client environments under defined rules of engagement. This positions HackerOne within a sector where regulatory expectations around vulnerability handling, data protection and incident response continue to evolve, particularly given that personal identifiers and health information were reported as compromised in the March 2026 incident. The response to the third-party Klue breach also illustrates operational practices associated with the sector, including the engagement of CrowdStrike for incident investigation and the disabling of external integrations to contain further exposure. The organisation's involvement with multiple affected firms during the Klue incident suggests it maintains relationships across the cybersecurity vendor ecosystem, although specific ownership, parent or subsidiary status details are not stated in the available material.

Incidents

2 incidents linked to this organisation.