HackerOne vs. SafeHats

HackerOne

SafeHats

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
HackerOne	Score 7.6 out of 10	N/A	HackerOne is a hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be exploited, from the company of the same name in San Francisco. The service is used for vulnerability location, pen testing, bug bounty, and vulnerability triage services.	N/A
SafeHats	Score 7.3 out of 10	N/A	SafeHats (a product of InstaSafe) promises to help security conscious Enterprises, Financial Institutions and Governments to leverage the power of Security Researcher community to discover and fix critical vulnerabilities in their digital assets faster and more effectively. The vendor says that enterprises benefit from this platform with Pay-Per-Bug model which means you pay only when the bugs are valid, rather than the efforts…	N/A

Pricing

HackerOne

SafeHats

Editions & Modules

No answers on this topic

Offerings

Pricing Offerings
HackerOne	SafeHats
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Additional Details

For more information please email www.hackerone.com/contact or find us on the AWS Marketplace: https://aws.amazon.com/marketplace/seller-profile?id=10857e7c-011b-476d-b938-b587deba31cf

—

More Pricing Information

Community Pulse
	HackerOne	SafeHats

User Ratings
	HackerOne	SafeHats
Likelihood to Recommend	7.0 (0 ratings)	- (0 ratings)

User Testimonials
	HackerOne	SafeHats
Likelihood to Recommend	Our security team will never scale like we'd like to do having this had been extremely helpful to manage, address, and payout vulnerabilities reported. I like having one "door" for this and not multiple ways to report stuff Incentivized Verified User Anonymous Read full review	No answers on this topic
Pros	Filter for spammy bug reports Nice central interface Payment/reward system is nice Incentivized Verified User Anonymous Read full review	No answers on this topic
Cons	A lot of duplicate bugs get reported, although it does offer automatic suggestion of previously reported bugs that may be duplicates, it is far from perfect. Anyone can report bugs, a lot of them are not verified before submission. This sometimes leads to a lot of time spent in verifying if the bug is really actionable. Each submission has to be treated with equal potential, a lot of time, some time gets invested in vulnerabilities that aren't as important as some others. Incentivized Jugpreet Talwar Technical Intern Read full review	No answers on this topic
Alternatives Considered	I haven't used any other products as such but I have read about bugcrowd. Incentivized Jugpreet Talwar Technical Intern Read full review	No answers on this topic
Return on Investment	Bugs that can't be tracked internally are submitted by external researchers, which is an important factor for security vulnerabilities. Even if the bugs reported are duplicates, there still is provision to award reputation points, that keep the researchers engaged. It also requires a lot of verification and validation, as a lot of the submissions are unverified to begin with. Incentivized Jugpreet Talwar Technical Intern Read full review	No answers on this topic
ScreenShots