2024 Live Hacking Events
2024 HackerOne Live Hacking Events are here and better than ever! At HackerOne, growing this program and the opportunities it brings to our community are key drivers for our teams. We aim to learn from you, our researchers, how we can expand, enhance, and engage with all parties to create the most memorable event possible. We appreciate everyone in our community who continues to give us feedback so we can continue to advance this program!
Before we dive into invitations for 2024 and the new criteria and estimated number of hackers within each “bucket,” we remind all our researchers that, regardless of what criteria you qualify with, all hackers must meet the below requirements:
- A hacker should have no Code of Conduct Violations or active mediation investigations in the past six months brought on by a customer or HackerOne.
Note: HackerOne reserves the right to make case-by-case exceptions to CoC violations, depending on the severity and context of the issue.
- A hacker cannot be located in a region under sanctions.
- Active participation in any invited events — lack of participation in previous events may affect future invitations.
- A hacker is expected to consistently showcase positive behavior.
Respect and professionalism will go a long way to continue to grow the LHE opportunities and ensure that all involved have a successful and positive experience.
The HackerOne Live Hacking Events program has grown into a wonderful way to provide direct engagement between our customers and researchers. Without your dedication, effort, and incredible skill, we would not be able to do this — so thank you!
HackerOne is only as strong as our community, and we are proud of the time, commitment, and hard work you all have put into making our community what it is today. We cannot wait to see you on the road next year and look forward to continuing to work with you to make the internet safer for all!
Below is our invitation structure for 2024 Live Hacking Events:
2024 Live Hacking Events Invitation Structure
These numbers are approximate and can vary by event — all decisions are subject to HackerOne discretion.
Every Live Hacking Event can have between 50-100+ researchers invited, depending on the event, location, structure, and participating programs. The amount of hackers invited within each bucket below will shift slightly based on factors such as:
- Proficiency of skills required to be successful in alignment with scope
- Location of event and/or capacity flexibility
- Industry Conference alignment (e.g., Defcon, Blackhat, etc.)
- Number of participating customers
- Restrictions or requirements for Customers (e.g., H1 Clear)
ALL live hacking event invitations will be evaluated using the below criteria:
- SIGNAL: > or = 5
- REPUTATION: minimum of 1,000 points
- No Code of Conduct violations in the past six months* see above for further details
- Professional interactions within the platform — especially with HackerOne and Customer team members
- No sanction-related concerns
- Past Live Hacking Event activity/engagement
- Event Scope/Skills Associated
To help provide the most opportunities to the most researchers, the invitations for events are fulfilled in the following order:
| Up to 10 researchers |
|
| Up to 10 researchers |
|
| Up to 20 researchers |
Note: we will pick up to 20 of the top researchers from a combined list of the past 3 live hacking events. |
| Up to 10 researchers |
|
| Up to 10 researchers |
|
| Up to 3 researchers |
Note: This doesn’t mean the hacker is new to the platform and does not include public LH events. |
| Up to 10 researchers |
Note: This criteria can also include the hackers that performed very well in the customer’s previous live hacking events. |
| Up to 3 researchers |
|
| Up to 10 researchers |
|
| Up to 5 researchers |
Note: HackerOne does NOT cover hotel/travel costs for geo-based hackers unless specified during the event. Additionally, depending on the location where the event is being hosted, we might not have any hackers from this category. |
We review our invitation methodology frequently and adjust as needed. Our most recent adjustments were made to provide consistent opportunities to our community, no matter their experience level.
Declining an Invite
If you do not currently have the bandwidth to participate fully or have concerns about travel for an event, please do not hesitate to let us know immediately. Feel free to decline the invitation or RSVP to participate virtually.
Declining an invitation to participate will not affect any future invitations. The health of our hackers is always a priority for HackerOne, and as such, we empower you to make the best decision for your physical and mental health.
If you have declined an invitation, the community team will do their best to ensure that you receive a future invitation that best aligns with your skillset in the same calendar year. However, We cannot promise that the invite will be sent during the next event. Please understand that declining an invitation does not allow you to nominate another hacker to participate in your place.
Thank you,
HackerOne Community Team
The 8th Annual Hacker-Powered Security Report
