HackerOne is a hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be exploited, from the company of the same name in San Francisco. The service is used for vulnerability location, pen testing, bug bounty, and vulnerability triage services.
N/A
SafeHats
Score 7.3 out of 10
N/A
SafeHats (a product of InstaSafe) promises to help security conscious Enterprises, Financial Institutions and Governments to leverage the power of Security Researcher community to discover and fix critical vulnerabilities in their digital assets faster and more effectively. The vendor says that enterprises benefit from this platform with Pay-Per-Bug model which means you pay only when the bugs are valid, rather than the efforts…
N/A
Pricing
HackerOne
SafeHats
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
HackerOne
SafeHats
Free Trial
No
No
Free/Freemium Version
No
No
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
For more information please email www.hackerone.com/contact or find us on the AWS Marketplace: https://aws.amazon.com/marketplace/seller-profile?id=10857e7c-011b-476d-b938-b587deba31cf
—
More Pricing Information
Community Pulse
HackerOne
SafeHats
Considered Both Products
HackerOne
Verified User
Anonymous
Chose HackerOne
These were very close and we liked HackerOne better. For a time we did have both and we felt the need to consolidate the information into one platform and end of life our internal offering. Overall we've been fairly happy with HackerOne.
Our security team will never scale like we'd like to do having this had been extremely helpful to manage, address, and payout vulnerabilities reported. I like having one "door" for this and not multiple ways to report stuff
A lot of duplicate bugs get reported, although it does offer automatic suggestion of previously reported bugs that may be duplicates, it is far from perfect.
Anyone can report bugs, a lot of them are not verified before submission. This sometimes leads to a lot of time spent in verifying if the bug is really actionable.
Each submission has to be treated with equal potential, a lot of time, some time gets invested in vulnerabilities that aren't as important as some others.