What Happened to HackerOne?

HackerOne, once a pioneer in the bug bounty space, is currently facing a concerning decline. For those unfamiliar with the term, bug bounty programs are platforms that allow ethical hackers to find and report security vulnerabilities in exchange for monetary rewards. HackerOne pioneered this concept, starting in 2011 when Jobert Abma and Michiel Prins began searching for security flaws in major tech companies.

Under the leadership of hackers and hacker-adjacent professionals, HackerOne hosted Live Hacking Events (LHEs) from 2017 to 2020, which were highly sought-after and productive gatherings. These events brought together the best and most skilled bug bounty hunters, allowing them to share knowledge and find significant vulnerabilities. The community spirit fostered by these events was unparalleled, and many lasting friendships were formed.

However, since around 2020 or 2021, HackerOne has been grappling with a critical question: how to make money? This shift in focus has led to a series of unfortunate changes. The once vibrant community groups and events have lost their momentum, and the highly exclusive LHEs have become more calculated and gamified. Key individuals responsible for organizing and running these events have either been laid off or left the company.

Furthermore, the once custom-designed LHE posters are now produced at a lower cost, indicating a decline in overall quality.

The once thriving ecosystem of security researchers and vibrant community spirit at HackerOne seems to be fading away. As the business model evolves, it remains to be seen whether HackerOne can regain its former glory and maintain its position as a leader in the bug bounty space.