So…what’s going on at Hacker One lately? It might be time for a wellness check. If you’re new to bug bounty (1‑3 years), I’ll explain. I began hacking there in 2017, then managed programs from 2018‑2025, so I’ve seen both sides.

In 2011, ethical hackers Jobert Abma and Michiel Prins targeted 100 top tech firms, uncovering bugs at Google, Facebook, Apple, Microsoft, Twitter, and others. The era was risky and legally murky. Platforms like Hacker One created a safe, paid channel for researchers to report vulnerabilities without court risk.

During its golden age, the company focused on hackers, running Live Hacking Events (LHEs) from 2017‑2020 that delivered critical findings in days. But around 2020, profit concerns pushed a shift. With $160M raised, Hacker One replaced the founding CEO with a corporate leader, moved to capacity‑based fees, annual contracts, and multi‑year lock‑ins, while the UI and community events stagnated.

The result is a decline in quality and community engagement. LHEs turned low‑effort prints, the platform’s core tech stalled, and researchers question whether this marks the end of the platform’s golden era.