HackerOne

San Francisco, CA, United StatesFounded 2012200+ peoplehackerone.com

L2Cross-referenced, highest level reached

1 cross-referenced

Verified against independent sources

en.wikipedia.org2026-07-04

No customer ratings yet. How L3 ratings work →

Request verified quotes Visit website ↗

Routing your brief is free, providers fund the channel. Capped at three recipients.

HackerOne is a L2-verified AI-implementation provider based in San Francisco, CA, United States, delivering appsec, vulnerability-mgmt, pentest. Ranked on proof, 1 verified records on the Trustgent index.

What they build

HackerOne is a San Francisco-headquartered crowdsourced security platform running managed bug bounty programs, vulnerability disclosure programs, and penetration tests delivered through its researcher community of 2M+ ethical hackers. Founded in 2012 by Michiel Prins, Jobert Abma, Alex Rice, and Merijn Terheggen. Also runs the AI red teaming and code security assessment product lines.

Quick facts

HQ: San Francisco, CA, United States
Founded: 2012
Team: 200+
Languages
Stack

Capabilities

Application security
Vulnerability management
Penetration testing

Industries served

Financial services
SaaS & technology
Government & public sector

Regulatory readiness

Cross-referenced against public registries where a public source exists (L2+). The check mark marks an attribute we have a source for, see the proof page.

About HackerOne

What does HackerOne build?

HackerOne is a L2-verified AI-implementation provider on Trustgent, delivering Application security, Vulnerability management, Penetration testing.

Where is HackerOne based?

HackerOne is headquartered in San Francisco, CA, United States.

How is HackerOne verified on Trustgent?

HackerOne has an EARNED verification level of L2 on Trustgent, with 1 contributing verified records (most recent verification: 2026-07-04). Verification is independent of any subscription, plan tier is never a ranking input.

How is HackerOne ranked?

Rank is a pure function of three EARNED signals: verification level (dominant), record count, and recency. No plan, fee, spend, or paid placement is ever an input. See https://trustgent.com/how-we-rank.