paidtaskers

HackerOne

Bug bounty platform · Websites, Games & App Testing

World's largest bug bounty and vulnerability disclosure platform, where security researchers earn bounties — commonly $50 to $10,000+ per accepted vulnerability, with $380M+ rewarded to date — for…

Websites, Games & App Testing Verified Oct 2026PayPal

In one paragraph

HackerOne pays for bug bounty hunting — billed per task, paid via PayPal and Bank transfer. Available: 15 tracked markets. Minimum age Official Community Member Terms (effective May 11, 2026): the platform is not intended for use by children under 13; if you are a minor you must disclose this to HackerOne in writing and a parent or legal guardian must agree to the Terms on your behalf — in practice bounty payouts also require Veriff ID verification, a tax form and your own bank/PayPal account.

Visit HackerOne

Quick facts

HackerOne quick facts
FactDetail
CategoryWebsites, Games & App Testing
Platform typeBug bounty platform
Websitehackerone.com
Pay unitPer task, Hourly or project rate
Typical rateNot published on the official site
Payout methodsPayPal, Bank transfer, SEPA, SWIFT international bank transfer, Cryptocurrency
Payout cadenceDaily, Monthly, Threshold-based
Minimum payoutNo minimum for PayPal (processed weekdays 12:30pm UTC, 1-2 days); $15 minimum for Bitcoin/USDC wallet payouts (daily 11pm UTC); bank transfers via Currencycloud require a $50 minimum (local) or $100 minimum (SWIFT priority), payable in 37 currencies. Optional threshold settings range $100-$10,000 with monthly processing on the 27th.
Minimum ageOfficial Community Member Terms (effective May 11, 2026): the platform is not intended for use by children under 13; if you are a minor you must disclose this to HackerOne in writing and a parent or legal guardian must agree to the Terms on your behalf — in practice bounty payouts also require Veriff ID verification, a tax form and your own bank/PayPal account.
Countries15 tracked — Global researcher community; individual programs set their own eligibility (most are open to all researchers); some programs exclude US-sanctioned countries.
LanguagesEnglish
EquipmentComputer, Stable internet
Experience neededExpert
Identity verificationPseudonymous accounts allowed at signup, but bounty payouts require (in order): identity verification via Veriff (valid 12 months), at least one valid payout method, and an approved tax form; bank accounts must be in your own/registered-business name matching the tax form; third-party accounts prohibited.
Last verified2026-10-02

Pros & cons — facts only

Pros

  • Pays via PayPal.
  • Payout cadence: Daily.
  • Instant signup — no approval wait.
  • Available in 15 tracked countries.

Cons

  • Entry gated by qualification/identity checks.

How to join HackerOne

  1. Create a free account at hackerone.com/users/sign_up (name, username, valid email; pseudonym OK; 12+ char password)
  2. verify email; optionally set 2FA and skills
  3. browse the program directory
  4. read each program's policy/scope
  5. submit vulnerability reports
  6. complete Veriff ID verification + tax form + payout setup to receive bounties. Private programs are invite-based (reputation-driven).

Signup involves: Instant signup · Sign up · Identity verification · Project matching

Pay & payouts

  • Billed per: Per task, Hourly or project rate
  • Payout methods: PayPal, Bank transfer, SEPA, SWIFT international bank transfer, Cryptocurrency
  • Payout cadence: Daily, Monthly, Threshold-based
  • Minimum payout: No minimum for PayPal (processed weekdays 12:30pm UTC, 1-2 days); $15 minimum for Bitcoin/USDC wallet payouts (daily 11pm UTC); bank transfers via Currencycloud require a $50 minimum (local) or $100 minimum (SWIFT priority), payable in 37 currencies. Optional threshold settings range $100-$10,000 with monthly processing on the 27th.

Requirements

Minimum age
Official Community Member Terms (effective May 11, 2026): the platform is not intended for use by children under 13; if you are a minor you must disclose this to HackerOne in writing and a parent or legal guardian must agree to the Terms on your behalf — in practice bounty payouts also require Veriff ID verification, a tax form and your own bank/PayPal account.
Languages
English
Identity verification
Pseudonymous accounts allowed at signup, but bounty payouts require (in order): identity verification via Veriff (valid 12 months), at least one valid payout method, and an approved tax form; bank accounts must be in your own/registered-business name matching the tax form; third-party accounts prohibited.
Skills
Specialized: web/mobile security research, vulnerability discovery, and detailed technical report writing (reproducible steps or working proof-of-concept). Hacker101 CTF and free educational materials support learning, but meaningful bounty income requires demonstrated skill.
Equipment
Own computer and internet connection for security research; testing tools range from free to paid (HackerOne publishes a list of 100 tools); no specific hardware mandated by the platform.

Where it's available

Global researcher community; individual programs set their own eligibility (most are open to all researchers); some programs exclude US-sanctioned countries.

Restrictions: Program-level exclusions exist (e.g., Epic Games excludes residents of Cuba, Iran, North Korea, Sudan, Syria); bank transfers cannot go to OFAC-sanctioned banks (e.g., VTB, Sberbank); INR local payouts capped (HDFC suspended).

  • Australia
  • Brazil
  • Canada
  • Germany
  • Egypt
  • France
  • United Kingdom
  • India
  • Mexico
  • New Zealand
  • Philippines
  • Pakistan
  • United States
  • Vietnam
  • South Africa

What kind of work

  • Bug bounty hunting
  • Vulnerability disclosure
  • Penetration testing

Testing prerequisites

  • Bug reporting

HackerOne FAQ

Is HackerOne legit?

Yes — HackerOne is a real, operating platform. We verified its signup, payout, and policy pages directly on 2026-10-02 using 7 sources.

How does HackerOne pay out?

Via PayPal, Bank transfer, SEPA, SWIFT international bank transfer, Cryptocurrency. Payout cadence: Daily / Monthly / Threshold-based. Minimum payout: No minimum for PayPal (processed weekdays 12:30pm UTC, 1-2 days); $15 minimum for Bitcoin/USDC wallet payouts (daily 11pm UTC); bank transfers via Currencycloud require a $50 minimum (local) or $100 minimum (SWIFT priority), payable in 37 currencies. Optional threshold settings range $100-$10,000 with monthly processing on the 27th.

Who can join HackerOne?

Minimum age Official Community Member Terms (effective May 11, 2026): the platform is not intended for use by children under 13; if you are a minor you must disclose this to HackerOne in writing and a parent or legal guardian must agree to the Terms on your behalf — in practice bounty payouts also require Veriff ID verification, a tax form and your own bank/PayPal account. Global researcher community; individual programs set their own eligibility (most are open to all researchers); some programs exclude US-sanctioned countries. Pseudonymous accounts allowed at signup, but bounty payouts require (in order): identity verification via Veriff (valid 12 months), at least one valid payout method, and an approved tax form; bank accounts must be in your own/registered-business name matching the tax form; third-party accounts prohibited.

How do I sign up for HackerOne?

Create a free account at hackerone.com/users/sign_up (name, username, valid email; pseudonym OK; 12+ char password) → verify email; optionally set 2FA and skills → browse the program directory → read each program's policy/scope → submit vulnerability reports → complete Veriff ID verification + tax form + payout setup to receive bounties. Private programs are invite-based (reputation-driven).

What skills does HackerOne require?

Specialized: web/mobile security research, vulnerability discovery, and detailed technical report writing (reproducible steps or working proof-of-concept). Hacker101 CTF and free educational materials support learning, but meaningful bounty income requires demonstrated skill.

Sources & verification

Facts on this page were verified against 7 sources. Last full check: .

Explore related collections

Browse all websites, games & app testing platforms →

Visit HackerOne