Testing started on new levels of bounty table transparency for hackers.

Hackers, good news: we’ve launched the ability to pause your payments and setting a minimum amount for a small group of hackers — and it’s looking good! We expect to make this available for the entire community in the second half of May.

Great hacking MUST be celebrated! Yes, with robust bounties of course. But also with praise when a hacker's creativity finds something unusual, or deeply hidden, or clever, or unexpected, or just downright impactful, or difficult, or ... ! I commit to giving more Testimonials.

Every Bug Bounty Program has areas for improvement. IMHO, the mark of a Gold Standard BBP is accepting feedback with humility and making updates. In this instance, we had a bounty table inconsistency. I approved $60,000 in retroactive payouts and we straightened out the table.

Hackers, I think this one's important. You deserve transparency as a matter of fairness and platform integrity. It is now mandatory for programs to always show time-to-bounty related statistics. (Example is from a leading program.)

Netflix bug bounty program will be moved to HackerOne !

Hackers, the new payment controls (pause, thresholds) have been released to all accounts. Thanks for all the feedback that helped us to prioritize this.

Hackers, today we’re announcing Spot Checks for all; a new way to help organizations all over the world by testing specific areas of their systems. Spot Checks vary in size and often pay out quickly (we’ve seen $500 within minutes). Opportunities show up on HackerOne and in

Hackers, thanks for the feedback on bounty table transparency enhancements. Glad it's useful! Why do this? See screenshot of great program. You deserve to know a program honors its bounty table, uses the extent of any ranges, and is generous with High / Critical severities.

I'm very excited about Spot Checks. It's a new way for hackers and enterprises to connect, to build relationships, and generate the same spectacular results they always do.

The massive Ambassador World Cup is starting again, with 700 hackers competing in 40 teams. Last year, one of our major customers said it was the best thing they ever did.

Thanks Nagli for the feedback. There is no new policy but there was a documentation error, which is now fixed. Keep the feedback coming!

HackerOne Ambassador World Cup in full swing with over $30,000 paid in bounties in these first days alone. How is your country faring? Bookmark the leaderboard so you can follow! leaderboards.hackerone.live/awc2024

Hackers, there's now a better UI for programs to give you testimonials on your public profile. As Chief Hacking Officer, it's my expectation that any top-tier or world-class program uses this to celebrate the best reports. Share with your friends who operate programs!

Hackers, based on feedback, we're planning to separate out and make BBP reputation the primary measure on profiles and leaderboards. Further iterations likely to follow -- feedback welcome as always.

Hackers, thanks as always for the on-point feedback! The missing tags, e.g. "Managed by HackerOne", are coming back. See screenshot. In the interim, it's still possible to search on them. And the new ones. I'm excited for programs to respect you by committing to "Fast Payment".

Collaboration yields more vulnerabilities and typically higher severities! Go hang out with (internet) friends and hack together!

The live hacking in Las Vegas is EPIC! Scoreboard shows $243,950 and we are only getting going.

Hackers, we’re running a beta with payouts directly to BTC and USDC wallets without needing a Coinbase account. No ETA on general availability but this is now live for the first 300 hackers to test it out.

Hackers, there's a new per-asset type leaderboard. Here are the current titans of the quarter for AI Model / AI Red Team assets. hackerone.com/leaderboard/as…