Tool integration

HackerOne Integration Guide

Industry-leading bug bounty platform with a JSON REST API for exporting vulnerability reports

Get a Free API Key

Integrate HackerOne with Vulnetix. Use the HackerOne API v1 to export vulnerability reports from your bug bounty programme and upload findings to Vulnetix.

SaaS platformJSONCSV

Run HackerOne in CI

Scan on every push and upload the results to Vulnetix:

- name: Export HackerOne reports
  env:
    H1_IDENTIFIER: ${{ secrets.H1_IDENTIFIER }}
    H1_TOKEN: ${{ secrets.H1_TOKEN }}
    H1_PROGRAM: ${{ secrets.H1_PROGRAM }}
  run: |
    curl -s "https://api.hackerone.com/v1/reports?filter[program][]=$H1_PROGRAM&filter[state][]=triaged&page[size]=100"       -u "$H1_IDENTIFIER:$H1_TOKEN" | jq '.data' > h1-reports.json

- name: Upload to Vulnetix
  run: vulnetix upload --file h1-reports.json

Centralise HackerOne results in Vulnetix

Upload HackerOne JSON, CSV output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

HackerOne documentation ↗

Wire HackerOne into your CI/CD pipeline →