What Internet Bug Bounty does

Internet Bug Bounty is a non-profit entity that coordinates community-driven vulnerability discovery and rewards for core internet and open-source software projects. It operates through HackerOne's Community Edition, a free SaaS tier that eligible open source projects can use to receive vulnerability reports, coordinate disclosure, and pay bug bounties to security researchers. To qualify, projects must use an OSI-approved license, be at least three months old with shipped releases or code contributions, and maintain an active SECURITY.md policy.

The underlying platform is HackerOne's SaaS vulnerability coordination and bug bounty product, featuring Security Pages for disclosure policies, a hacker reputation system, private hacker invitations, integrated discussion tools, REST API access, advanced analytics, duplicate detection via pattern matching, and SAML 2.0 SSO integration. The broader HackerOne platform surrounding Community Edition includes AI-native capabilities — Hai (agentic AI orchestrator), H1 Agentic Pentest, H1 AI Red Teaming, H1 Code, and H1 Validation — along with a global community of security researchers engaged through Live Hacking Events and the Ambassador World Cup.

Internet Bug Bounty / Community Edition generates no direct subscription revenue. The Community Edition is free for eligible open source projects, and the only monetization mechanism is a 5% payment processing fee on cash bounties paid to hackers (e.g., $50 fee on a $1,000 bounty), covering compliance, payment fulfillment, and 1099 reporting. Distribution is product-led and self-serve, with online applications typically reviewed within one business week. The broader HackerOne platform monetizes separately via enterprise subscriptions and direct sales, but the Internet Bug Bounty entity itself functions as a charitable coordinator rather than a commercial SaaS.

Name

Internet Bug Bounty

Website

https://internetbugbounty.org

Company type

Private

Operating status

Operating

Short description

Internet Bug Bounty is a non-profit that coordinates community-driven vulnerability discovery and rewards for core internet and open-source software projects, operating via HackerOne's free Community Edition platform to provide disclosure infrastructure and bug bounty capabilities to eligible open source projects.

Ownership category

akta.pro rank

Product category

Vulnerability Coordination Services

akta.pro primary industry

Bug Bounty, Vulnerability Disclosure & Security Services (FSAPAJAL)

akta.pro secondary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

Keywords

• Bug bounty programs
• Vulnerability disclosure
• Open source security
• Responsible disclosure
• Vulnerability coordination

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Community Edition - Transaction Fees: The Community Edition is free for eligible open source projects to use the platform. However, if programs choose to pay cash bounties to hackers, HackerOne charges a 5% payment processing fee on top of the bounty amount. For example, a $1,000 bounty costs $1,050 total ($50 fee). The fee covers compliance checks, payment fulfillment, and year-end 1099 reporting.
2. Enterprise Subscriptions: HackerOne offers paid product editions (H1 Bounty, H1 Agentic Pentest, H1 Continuous Testing, H1 AI Red Teaming, H1 Code, H1 Validation) with dedicated customer support and program assistance. These are subscription-based offerings for enterprise customers requiring white-glove service.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels6 records

Core offering

Internet Bug Bounty is a non-profit program that coordinates community-driven vulnerability discovery and rewards for core internet and open-source software projects. It provides a free platform for eligible open-source projects to receive vulnerability reports from a global community of ethical security researchers, manage coordinated disclosure, and pay bug bounties for valid findings.

Product overview

HackerOne operates as a platform-plus-modules architecture offering comprehensive vulnerability discovery and security testing solutions. The core H1 Platform provides AI-scale continuous security operations, while specialized modules include: Hai (agentic AI orchestrator), H1 Bounty (crowdsourced bug bounty programs), H1 Agentic Pentest (AI-driven penetration testing), H1 Continuous Testing (continuous pentest-grade coverage), H1 AI Red Teaming (AI system security testing), H1 Code (AI code security with human validation), and H1 Validation (exploitability confirmation). HackerOne Community Edition is a free tier offering specifically for eligible open source projects, providing vulnerability coordination and bug bounty management without the paid support features of enterprise tiers.

Differentiator

Problem solved

Functional benefit

Brands

• Community Edition: Free version of HackerOne Bounty program for eligible open source projects, offering vulnerability coordination and bug bounty payout capabilities

Products and services

• Internet Bug Bounty Program Non-profit vulnerability coordination and bug bounty rewards program for core internet and open-source software projects. The program provides coordinated disclosure infrastructure, access to a global community of vetted ethical security researchers, and bounty payment management for eligible open-source projects at no cost. Operates via HackerOne's Community Edition platform.

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability4 records

Feature8 records

Partnerships

Three partnerships are on record, tiered core and supporting.

• AWScoreTechnology or IntegrationHackerOne has a dedicated partnership with Amazon Web Services (AWS), offering integrated security testing capabilities for AWS customers. This alliance provides joint customers with access to HackerOne's hacker-powered security testing alongside AWS cloud infrastructure.
• Technology Alliance Program PartnerscoreTechnology or IntegrationHackerOne maintains a Technology Alliance Program with various integration partners. The platform supports integrations with code hosting platforms (GitHub, GitLab) and other development tools. New integrations are regularly added to the ecosystem.
• Channel PartnerssupportingChannel Partner/ Reseller/ DistributorHackerOne operates a channel partner program with certified partners who resell and distribute HackerOne products. The company provides a Partner Portal for partner management and a Find A Partner resource for customers seeking certified resellers.

Scale indicators1 record

Recent moves6 records

Expansion highlights5 records

Direct peers

• Open Bug Bounty: Open Bug Bounty is a non-commercial, open-source-friendly vulnerability disclosure and bug bounty coordination platform that, like IBB, focuses on enabling coordinated disclosure for websites and open projects without mandatory fees.
• Intigriti: Intigriti is a European bug bounty and crowdsourced security platform serving enterprises with continuous testing, pentesting, and vulnerability disclosure programs. It competes head-to-head with HackerOne for researcher mindshare and enterprise bug bounty programs, which also affects IBB-affiliated open source programs.
• YesWeHack: YesWeHack operates a global bug bounty and vulnerability disclosure platform with a strong European presence and an open-source-friendly stance, including its own Open-Source bug bounty program. It is directly comparable to the crowdsourced vulnerability coordination that IBB coordinates.
• Synack: Synack is a crowdsourced security testing platform that combines a vetted researcher community with proprietary AI-driven vulnerability triage. It competes with the HackerOne platform for enterprise security testing budgets and shares the same crowdsourced human+AI security model that IBB leverages.
• Bugcrowd: Bugcrowd is a leading crowdsourced cybersecurity platform that connects organizations with a global researcher community for bug bounty, vulnerability disclosure, and pentest programs. It directly competes with the HackerOne platform that IBB relies on for crowdsourced vulnerability coordination.

Broad incumbents

• Snyk: Snyk is a broader developer security platform covering open source dependency scanning, code security, and container security with strong open source adoption. It is comparable as an open source-adjacent security vendor whose ecosystem overlaps with IBB's open source project base.

Emerging players

• Detectify: Detectify provides automated external attack surface and vulnerability scanning, with crowd-sourced research feeds (Detectify Crowdsource) feeding its detection engine. It is comparable as a vulnerability discovery platform, though more automated than IBB's coordinated human-driven disclosure model.
• Cobalt: Cobalt runs a crowdsourced pentest platform that connects organizations with vetted security researchers for on-demand and continuous penetration testing. It overlaps with IBB-adjacent pentest and vulnerability validation use cases, particularly where human-in-the-loop security testing is delivered.
• Pentera: Pentera provides automated, agent-based security validation that emulates attacker techniques against enterprise environments. It represents the automated pentest category that increasingly competes with crowdsourced/human-driven services for share of vulnerability discovery spend.

Others

• GitHub Security Lab: GitHub Security Lab is an open community of security researchers focused on finding and reporting vulnerabilities in open source software hosted on GitHub. It is thematically related as an open source vulnerability coordination initiative that operates in parallel to IBB's mission.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/Hacker0x01
• Facebookfacebook.com/Hacker0x01
• LinkedInlinkedin.com/company/hackerone
• Instagraminstagram.com/hacker0x01

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Internet Bug Bounty