FedRAMP Trust Center Index

HackerOne

HackerOne Continuous Security Testing Platform

No trust center linked in FedRAMP's data as of Nov 2, 2026. TrustBox builds and hosts trust centers for FedRAMP providers. Get started

FedRAMP Marketplace listing · Provider website · JSON

HackerOne is a multi-tenant Vulnerability Disclosure and crowdsourced Bug Bounty platform. Organizations rely on HackerOne to detect unknown security vulnerabilities in public-facing systems as well as sensitive assets that are not publicly disclosed. This is done by giving customers access to the world’s largest community of crowdsourced security researchers. Researchers then conduct remote, internet based, crowdsourced vulnerability discovery and disclosure services against internet-accessible assets, including public-facing websites, networks, systems, and applications.

Facts

FedRAMP ID
FR1919750997
Status
FedRAMP Authorized
Impact level
LI-SaaS
Authorization path
Agency
Authorized
May 6, 2020
Service model
SaaS
Deployment
Public Cloud
Assessor
Schellman Compliance, LLC
Initial authorizing agency
General Services Administration
Small business
Yes

CR26 trust center

Package
FedRAMP Rev5
Trust center
Not listed
Next ongoing report
Not stated
Schema check
Passes FedRAMP's schema

Gaps found

  • No UEI number; include it if you have one CDS-CSO-PUB
  • No business category listed CDS-CSO-PUB
  • No trust center link; CR26 requires one with access instructions CDS-CSO-UTC
  • No link to secure configuration guidance SCG-CSO-RSC
  • No next Ongoing Certification Report date CDS-CSO-PUB
  • No service list; CR26 requires the services in scope CDS-CSO-SVC
  • No documentation overview (repositories) listed CDS-CSO-PUB

Built on

Offerings built on HackerOne Continuous Security Testing Platform 2

Agencies with an ATO 3

Status history

  1. May 6, 2020 FedRAMP Certified Rev5
  2. Apr 24, 2020 FedRAMP In Process Rev5
  3. May 8, 2019 Agency Authorization In Process Rev5