HackerOne
The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting
- Authentication
- API Key
- HTTPS
- Yes
- CORS
- Unknown
- Category
- Security
- Data source
- public-apis + marcelscruz
- Documentation / URL
- https://api.hackerone.com/
Overview
HackerOne provides bug bounty APIs — key-based (a missing key returns 401, verified).
Quick Start
Me (replace YOUR_USER/YOUR_KEY):
curl "https://api.hackerone.com/v1/hackers/me" \
-u "YOUR_USER:YOUR_KEY"{ "errors": [ { "status": 401 } ] }Authentication
- HackerOne account → API identifier + key.
- Send via Basic auth (missing → 401, verified).
Rate Limits & Notes
- Free with account (check the docs).
- Reports, programs, hackers.
FAQ
Is HackerOne free? Yes — free with an account.
Why 401? Credentials required (verified) — use Basic auth.
What’s the auth style? Basic auth (identifier:key).
More in Security
| API | Auth | HTTPS | CORS | |
|---|---|---|---|---|
| Application Environment Verification Android library and API to verify the safety of user devices, detect rooted devices and other risks | API Key | Yes | Yes | ↗ |
| ArkForge Trust Layer Cryptographic proof API for HTTP exchanges — Ed25519, RFC 3161, and Sigstore Rekor attestation | API Key | Yes | Unknown | ↗ |
| BinaryEdge Provide access to BinaryEdge 40fy scanning platform | API Key | Yes | Yes | ↗ |
| BitWarden Best open-source password manager | OAuth | Yes | Unknown | ↗ |
| Botd Botd is a browser library for JavaScript bot detection | API Key | Yes | Yes | ↗ |