HackerOne

About HackerOne

HackerOne is a bug bounty platform where security researchers find and report vulnerabilities in the public and private programs of more than 1,000 companies. Each program sets its own bounty for valid, in-scope findings, and some programs only offer thanks or swag, so earnings vary widely; HackerOne says it has paid more than $380 million to hackers. Proven researchers can be invited to paid penetration-testing engagements. Payouts go by PayPal, bank transfer or Bitcoin/USDC, on a daily or monthly schedule you choose.

Who can apply

Sign-up is free and you can use a pseudonym, but this is skilled security work, so you need to know how to find and document vulnerabilities. Before your first payout you must pass an ID check, submit a tax form (a W-9 for US researchers) and add a payout method.