Integrate HackerOne directly into your website with Embedded Submissions
The Embedded submissions feature enable organizations to embed the HackerOne vulnerability form onto their own website. Reports can be submitted directly through the organization's website rather than navigating to HackerOne. Furthermore, this allows hackers who do not have a HackerOne account to submit vulnerabilities.
Users that want to stay anonymous, can stay anonymous
With the introduction of this integration, we’re adding the option for finders to submit anonymously. This allows good Samaritans to elect anonymity if they desire it, removing another barrier that can prevent someone from notifying you of a security vulnerability. HackerOne’s Embedded Submission form is the first of its kind that allows anonymous submissions.
Of course, anonymously submitted vulnerabilities will be validated and triaged using noise filters (Human Augmented Signal) as per the normal triage process. If a hacker later decides to create a HackerOne account, they can claim the reputation for their valid submission.
Embedded Submissions is available starting today for all customers. Check out our documentation for more information and let us know if you have any feedback or questions. We would love to hear your feedback.