HackerOne — Cyborg Score 8/10

Strong
Crowdsourced Security Testing Platforms

Strategic Profile

As of March 2026, HackerOne has shifted from a manual bug-bounty marketplace to an AI-augmented Attack Resistance platform, tackling the cybersecurity talent gap and scaling faster than traditional models, with over 2 million researchers and $300M+ in bounties paid. HackerOne commands a dominant share of the bug bounty market, having helped uncover over a million vulnerabilities and paid hundreds of millions in rewards.

Cyborg Score Rationale

HackerOne demonstrates a more resilient financial profile with subscription-led ARR growth, sector diversification (40% of new business from non-tech verticals), and a clear path to break-even. In April 2026, HackerOne announced H1 Validation, a new offering designed to help enterprises manage the surge and complexity of vulnerabilities uncovered by frontier AI models. However, the company faces competitive pressure and macro headwinds.

Top Insights

  • HackerOne's 2024 pivot to Generative AI for triage turned the platform into an essential, automated bridge between ethical hackers and Fortune 500s.
  • 40% of new bookings come from healthcare, finance, and other non-tech sectors, and emphasis on CAC payback and subscription gross margins aims to shorten time-to-profit while preserving ARR momentum.
  • Leadership signals a move from periodic audits to 24/7 Continuous Security Research—an operational model that monetizes persistent coverage and aligns with analysts projecting ~20% annual growth in crowdsourced security, offering customers faster risk reduction and steady revenue streams.
  • As of May 31, 2026, HackerOne has approximately 6,897 employees.

Named Competitors

  • Bugcrowd — Vulnerability management and bug bounty platform
  • Snyk — Developer security and vulnerability scanning platform
  • Checkmarx — Application security and code analysis platform
  • Cobalt — Managed bug bounty and penetration testing

Recent Developments

  • (May 2026) Partnership with Wiz to integrate cloud security platforms for vulnerability prioritization
  • (April 2026) Launched H1 Validation to help enterprises manage AI-discovered vulnerabilities
  • (March 2026) Evolved into AI-augmented Attack Resistance platform with expanded researcher network

Open the full interactive HackerOne report

Strategic research, analyst-debate audio, full Cyborg Score breakdown across 11 dimensions, and saved-company audio playlists.

Open report →