HackerOne
HackerOne, Inc. · hackerone.com · Last checked:
- Security assessment firm
- Red team engagements (human-led, agent-driven)
Company status
Active.
Sources 1, 2 · checked 2026-11-08
Capabilities
- AI red teaming engagements of 15 or 30 days with a defined threat model, launching in about one week
- Scope covers prompts, models, APIs, retrieval pipelines, tool permissions, and agent workflows; security (prompt injection, data exfiltration) and safety (jailbreaks, unsafe outputs) risks
- Findings with reproducible attack traces, proof of exploit, and remediation guidance; mapped to OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act
- Retesting and remediation validation
Sources 1, 2 · checked 2026-11-08
Who it tends to fit
- Enterprises shipping AI features or agents that need a time-boxed adversarial security and safety test before go-live
- Security teams wanting findings mapped to governance frameworks
Sources 1, 2 · checked 2026-11-08
Pricing
Contact vendor (get started / speak with a security expert)
Sources 1, 2 · checked 2026-11-08
Published certifications
Limitations to check
- No public pricing
- Focus is adversarial security and safety testing of deployed systems, not capability benchmarking or domain-expert grading
- Trust Center does not state the FedRAMP level; confirm scope
Sources 1, 2 · checked 2026-11-08
Sources
- AI Red Teaming page: 15- or 30-day engagements, about one-week launch, human-led agent-driven testing, scope, deliverables, framework mapping, retestingwww.hackerone.com/product/ai-red-teamingChecked 2026-11-08
- Trust Center (hackerone.com/trust redirects here) lists SOC 2 Type 2, ISO 27001, FedRAMP, UK Cyber Essentials Plus, GDPR, PCI DSStrust.hacker.one/Checked 2026-11-08
Report a correction: [email protected]. Facts are re-checked at least every 90 days.