🚨HackerOne Shifts Focus From Community to Profit
The platform's shift from community to profit is a big deal for security researchers
TL;DR
HackerOne, once a haven for bug bounty hunters and infosec pros, has pivoted towards profitability. The company now focuses on sales-driven growth and multi-year contracts, altering the landscape for security researchers.
HackerOne, originally designed as a secure space for companies and hackers to collaborate on finding vulnerabilities, has shifted its focus from fostering community to driving profit. Over the past decade, HackerOne raised $160M in VC funding but began prioritizing revenue over innovation around 2020. The platform's stagnation is evident in outdated UI and performance issues. Instead of improving core technology, HackerOne introduced capacity-based fees and multi-year contracts to lock in customers. This shift impacts the infosec community by altering how researchers engage with companies and each other.
Key Points
HackerOne raised $160M in VC funding between 2014 and 2022
The platform introduced capacity-based fees and multi-year contracts around 2020
Annual contract renewals often come with massive discounts (30-60%) for multi-year deals
HackerOne's core technology began to stagnate, with outdated UI and performance issues
Live Hacking Events (LHEs) fostered a tight-knit community among security researchers
Why It Matters
If you're a security researcher using HackerOne, the shift in business model means less focus on innovation and more on sales. The platform's stagnation impacts how you engage with companies for bug bounties, potentially reducing opportunities for collaboration and growth within the infosec community.
Frequently Asked Questions
Why does this matter?
If you're a security researcher using HackerOne, the shift in business model means less focus on innovation and more on sales. The platform's stagnation impacts how you engage with companies for bug bounties, potentially reducing opportunities for collaboration and growth within the infosec community.
What happened?
HackerOne, once a haven for bug bounty hunters and infosec pros, has pivoted towards profitability. The company now focuses on sales-driven growth and multi-year contracts, altering the landscape for security researchers.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 2,763 builders reading daily.