We maintain the largest and most authoritative database of vulnerabilities in the industry and our reward program encourages our hacker community to identify and submit vulnerability reports on everything from websites, APIs, mobile apps, hardware devices, and an increasingly diverse and vast array of attack surfaces.
In terms of how we keep track, there’s a clear process for our hackers to follow. Once they’ve signed up to a HackerOne account, they can search for a participating program and start hacking. If they find a vulnerability they then use the HackerOne Directory to find the best way to contact the organisation and submit a report. The company will then review the contents and reward valid findings.