What Happened to HackerOne?

HackerOne, a pioneer in the bug bounty space, has undergone significant changes over the years. Born in 2011 by two ethical hackers, Jobert Abma and Michiel Prins, HackerOne aimed to provide a safe platform for companies and hackers to collaborate on identifying and reporting security vulnerabilities. Over the next few years, the business focused on creating the best possible product for hackers, running Live Hacking Events (LHEs) and fostering a strong community for security researchers.

LHEs were a key aspect of HackerOne's success, attracting top researchers from around the world to find critical vulnerabilities in a short period. These events were highly coveted and included exclusive perks such as free flights, hotels, and custom-designed memorabilia. HackerOne's community-building efforts extended beyond LHEs, with regional clubs, meetups, online events, workshops, and Capture the Flag (CTF) competitions.

However, beginning around 2020-2021, HackerOne faced the question of how to make money, given that it had relied on venture capital (VC) funding for the past decade. As the company struggled to sustain itself, it began making cuts to its community groups and events, with the custom LHE posters becoming low-effort laser prints. The people who had dedicated years to creating and running these events were laid off or left, and the invitation and scoring systems for LHEs became even more exclusive, calculated, and gamified.

The article highlights the transformation of HackerOne from a groundbreaking pioneer in ethical security research to a business grappling with financial sustainability while maintaining its core values of fostering a community for security researchers.