HackerOne
Company type | Private |
---|---|
Industry | Cybersecurity |
Founded | 2012 |
Founders | Michiel Prins, Jobert Abma, Alex Rice and Merijn Terheggen |
Headquarters | San Francisco, California |
Key people | Mårten Mickos (CEO) |
Website | hackerone |
HackerOne is a vulnerability disclosure company based in San Francisco, California, which established a bug bounty platform that connects businesses with security researchers.[1][2] The company has an additional office located in Groningen (Netherlands) where the main part of the development is done. It provides its service to companies such as Twitter, Slack, Adobe, Yahoo, LinkedIn and Airbnb.[1] HackerOne is one of the first companies to embrace and utilize hackers as part of its business model.[2][3]
History
In 2011, Jobert Abma, Michiel Prins, and Merijn Terheggen attempted to find vulnerabilities in 100 high-tech companies.[1] They found security vulnerabilities in Facebook, Google, Apple, Microsoft, Twitter and 95 other companies' systems.[1] Abma, Prins, and Terheggen met Alex Rice, Facebook's head of product security, after notifying the company that its system had a software vulnerability.[1] They founded HackerOne in 2012.[4] In November 2013, the company announced that it would host the Internet Bug Bounty project, a program encouraging the discovery and responsible disclosure of internet bugs, funded by Microsoft and Facebook.[5]
In May 2014, HackerOne received $9 million in Series A funding from Benchmark.[6][7] Bill Gurley, Benchmark's general partner, joined HackerOne's board of directors as part of the deal.[6] John Hering, executive chairman of Lookout, joined the board of directors as well. Additionally, the company hired Katie Moussouris, former Microsoft lead security strategist, as Chief Policy Officer.[8][9] In 2015, HackerOne opened an office in the Netherlands on the campus of The Hague Security Delta (HSD), known as the European cyber security capital.[10]
The company announced a $25 million Series B funding round in June 2015.[2][3][11] The round was led by New Enterprise Associates and included investments from Marc Benioff, Yuri Milner, Drew Houston, Jeremy Stoppelman, David Sacks, Brandon Beck and Nicolas Berggruen.[4][12] Following the funding round, New Enterprise Associates' general partner Jon Sakoda joined HackerOne's board of directors.[3] In November 2015, founding member and CEO, Terheggen stepped down from his role and Marten Mickos assumed the role.[13]
Operations
HackerOne develops a vulnerability coordination and bug bounty platform.[14] Companies pay hackers through the platform as a reward for identifying vulnerabilities in their systems and products.[15] The platform enables secure intelligence report sharing, payment and a reputation system for hackers.[14] By June 2015, HackerOne's platform identified approximately 10,000 vulnerabilities and paid hackers over $3 million.[4][16] At that time, the company's network of 1,500 hackers spans 150 countries.[3][16] In 2016, HackerOne's bug bounty platform was used by the Pentagon for the Hack the Pentagon program. The program paid hackers to report vulnerabilities in Department of Defense websites and revealed 138 bug reports and paid hackers $71,200 in bounties.[17][18]
References
- ^ a b c d e "HackerOne Connects Hackers With Companies, and Hopes for a Win-Win". New York Times. June 7, 2015. Retrieved October 28, 2015.
- ^ a b c "HackerOne raises $25 million in vulnerability management push". ZDNet. June 24, 2015. Retrieved October 28, 2015.
- ^ a b c d "HackerOne, a computer bug bounty firm, raises $25 million". Fortune. June 24, 2015. Retrieved October 28, 2015.
- ^ a b c "HackerOne Bags $25M As Security Info Sharing Mainstreams". TechCrunch. June 24, 2015. Retrieved October 28, 2015.
- ^ "HackerOne Lands $25 Million to Grow Bug Hunting Business". Security Week. June 24, 2015. Retrieved October 28, 2015.
- ^ a b "HackerOne Get $9M In Series A Funding To Build Bug Tracking Bounty Programs". TechCrunch. May 28, 2014. Retrieved October 28, 2015.
- ^ "HackerOne lands $9 million to aid in its bug-disclosure program". Gigaom. May 28, 2014. Retrieved October 28, 2015.
- ^ Dennis Fisher (May 28, 2014). "HackerOne Bug Bounty Platform Lands Top Microsoft Security Expert". ThreatPost. Retrieved October 28, 2015.
- ^ Eduard Kovacs (May 29, 2014). "HackerOne Secures $9 Million, Appoints Katie Moussouris Chief Policy Officer". Security Week. Retrieved October 28, 2015.
- ^ "Startup HackerOne, a valuable asset to The Hague". Innovation Quarter. December 7, 2015. Retrieved December 9, 2015.
- ^ "The Daily Startup: HackerOne Secures $25 Million in Series B Funding". Wall Street Journal. June 24, 2015. Retrieved October 28, 2015.
- ^ "HackerOne raises $25M to make the Internet safer via bug bounty programs". VentureBeat. June 24, 2015. Retrieved October 28, 2015.
- ^ Darrow, Barb (November 11, 2015). "Serial CEO Marten Mickos Joins Hacker One". Fortune. Retrieved October 9, 2016.
- ^ a b "NEA Leads HackerOne's $25M Star-Studded Series B Round". June 24, 2015. Retrieved October 28, 2015.
- ^ "When It's A Good Idea To Invite An Army Of Hackers To Attack You". Forbes. September 10, 2014. Retrieved October 28, 2015.
- ^ a b "The Big Business of Smashing Bugs". Bloomberg. March 12, 2015. Retrieved October 28, 2015.
- ^ Conger, Kate (June 17, 2016). "Department of Defense Expanding Hack the Pentagon Program". TechCrunch. Retrieved October 9, 2016.
- ^ Camarda, Bill (June 21, 2016). "138 Security Flaws in US Defense Website Uncovered in Hack the Pentagon". Naked Security by SOPHOS. Retrieved October 9, 2016.