TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    HackerOne

    Score7.6 out of 10
    N/AHackerOne is a hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be exploited, from the company of the same name in San Francisco. The service is used for vulnerability location, pen testing, bug bounty, and vulnerability triage services.N/A

    SecureBug

    N/AN/AFully Managed, End-to-End SecureBug provides end-to-end support for every Intelligent Discovery, NGP and Bug bounty program. From pentester selection to vulnerability triage, retesting, and reporting. Real-Time, Vuln View Real-time vuln view and platform-assisted actions help to process findings fast. Leverage crowd minded SBC expertise Triage and Validate- View and…N/A
    Pricing
    HackerOneSecureBug
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    HackerOneSecureBug
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeOptional
    Additional DetailsFor more information please email www.hackerone.com/contact or find us on the AWS Marketplace: https://aws.amazon.com/marketplace/seller-profile?id=10857e7c-011b-476d-b938-b587deba31cf
    More Pricing Information
    User Ratings
    HackerOneSecureBug
    Likelihood to Recommend
    7.0
    (2 ratings)
    -
    (0 ratings)
    User Testimonials
    HackerOneSecureBug
    Likelihood to Recommend
    HackerOne
    It is one of the good platforms for security researchers to submit bugs and other vulnerabilities, it however, has some challenges, in terms of un-verified and duplicate submissions.
    Incentivized
    Read full review
    Securebug AB
    No answers on this topic
    Pros
    HackerOne
    • Filter for spammy bug reports
    • Nice central interface
    • Payment/reward system is nice
    Incentivized
    Read full review
    Securebug AB
    No answers on this topic
    Cons
    HackerOne
    • A lot of duplicate bugs get reported, although it does offer automatic suggestion of previously reported bugs that may be duplicates, it is far from perfect.
    • Anyone can report bugs, a lot of them are not verified before submission. This sometimes leads to a lot of time spent in verifying if the bug is really actionable.
    • Each submission has to be treated with equal potential, a lot of time, some time gets invested in vulnerabilities that aren't as important as some others.
    Incentivized
    Read full review
    Securebug AB
    No answers on this topic
    Alternatives Considered
    HackerOne
    These were very close and we liked HackerOne better. For a time we did have both and we felt the need to consolidate the information into one platform and end of life our internal offering. Overall we've been fairly happy with HackerOne.
    Incentivized
    Read full review
    Securebug AB
    No answers on this topic
    Return on Investment
    HackerOne
    • Bugs that can't be tracked internally are submitted by external researchers, which is an important factor for security vulnerabilities.
    • Even if the bugs reported are duplicates, there still is provision to award reputation points, that keep the researchers engaged.
    • It also requires a lot of verification and validation, as a lot of the submissions are unverified to begin with.
    Incentivized
    Read full review
    Securebug AB
    No answers on this topic
    ScreenShots