{"id":"FR1919750997","name":"HackerOne Continuous Security Testing Platform","provider":"HackerOne","providerSlug":"hackerone","status":"FedRAMP Authorized","impact":"LI-SaaS","authType":"Agency","authDate":"2020-05-06","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":[""],"assessor":"Schellman Compliance, LLC","assessorId":"136571","smallBusiness":true,"website":"https://www.hackerone.com/","description":"HackerOne is a multi-tenant Vulnerability Disclosure and crowdsourced Bug Bounty platform. Organizations rely on HackerOne to detect unknown security vulnerabilities in public-facing systems as well as sensitive assets that are not publicly disclosed. This is done by giving customers access to the world’s largest community of crowdsourced security researchers. Researchers then conduct remote, internet based, crowdsourced vulnerability discovery and disclosure services against internet-accessible assets, including public-facing websites, networks, systems, and applications.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/HackerOne%20Logo.png","inMarketplace":true,"agencies":["22-037","22-042","22-019"],"reuseCount":2,"leverages":["AGENCYAMAZONEW","F1206081364","F1607057910","F1512167750","F1508207205","FR1823447014","FR1809360201","FR1918740338","FR1821856903"],"leveragedBy":["FR1812058188","FR2201340492"],"timeline":[{"date":"2019-05-08","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2020-04-24","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2020-05-06","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Schellman Compliance, LLC"},"sponsor":"22-019","trustCenterCheck":null}