Provider profile
HackerOne
HackerOne offers pentest as a service in two forms: a human-led H1 Pentest and an H1 Agentic Pentest where AI agents work under human review. Results stream into the HackerOne platform and a final report closes the engagement.
Visit HackerOne Back to comparison
Last checked 9 November 2026. Facts come from HackerOne's own public pages, linked below.
At a glance
| Type | Crowdsourced platform |
|---|---|
| Delivery | hybrid H1 Pentest is fully human-led; H1 Agentic Pentest pairs AI agents with human pentesters who review every agent finding. |
| Scope | Web apps: yes APIs: yes Cloud: yes Network: yes Mobile: yes AI apps: yes |
| Pricing model | custom quote |
| Turnaround | Product page gives no start time or test length. HackerOne docs list the final report 3-5 business days after testing ends. Docs figure is report delivery after the testing phase, not time to start. source |
| Retesting | Retesting is included after remediation. Docs say unlimited retests during the remediation period (typically 30 or 90 days) at no extra cost, usually completed within 72 hours once claimed; after the window a fee (minimum $50) can be set. Older docs and posts show 60-day / two-retest wording. source |
| Sample report | not published |
| Compliance mentioned | SOC 2, ISO 27001, PCI DSS, DORA, NIST CSF 2.0, GDPR |
| Integrations | GitHub, Jira, Slack, ServiceNow |
Pricing
Prices are not published. You need to ask for a quote.
No dollar amounts on the pricing page; all tiers route to sales. The only metered unit shown is monthly automations for the platform tiers, which is not a pentest price. The agentic tier currently covers web apps and APIs only; the wider scope list applies to the human-led H1 Pentest.
Credentials
No credentials with public evidence found.
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Organisations that already use HackerOne or want pentests from the same vendor as a bug bounty or disclosure program, and that want a choice between fully human and AI-assisted testing.
Tradeoffs
Pricing is quote-only, no sample report is offered and no testing lead time is published. Retest terms differ between product page, docs and older posts.
Sources
- HackerOne pricing (checked 9 November 2026)
- HackerOne pentest product page (checked 9 November 2026)
- HackerOne docs: retesting pentests (found via search; not opened directly) (checked 9 November 2026)
See something wrong or out of date? Send a correction.