Skip to main content

Received a Vulnerability or Contacted by a Hacker?

HackerOne can help.

I received a vulnerability report and my organization needs assistance with next steps.*

My organization wants to learn more about HackerOne vulnerability programs.

If you are a hacker looking to submit a vulnerability you have discovered:

  1. First, search the HackerOne Directory for the appropriate program to report your finding.
  2. If a program does not exist, submit the vulnerability through our Disclosure Assistance process.

*If you're being extorted, blackmailed, or threatened by a bad actor, contact law enforcement.

What should I do if I'm experiencing a DDOS attack?
What should I do if I'm experiencing a malware attack?
What should I do if I've discovered a phishing attempt?