HackerOne
Attack Resistance Platform combines the most creative human intelligence with the latest artificial intelligence to reduce threat exposure at all stages of the software development lifecycle.
Go to siteHackerOne API Integrations
Build and run workflows using the HackerOne API. Use 1000s of source-available triggers and actions across 2,400+ apps. Or write custom code to integrate any app or API in seconds.
Trusted by 1,000,000+ developers from startups to Fortune 500 companies
Overview#
The HackerOne API enables automated interactions with the HackerOne platform, facilitating the management of vulnerability coordination and bug bounty programs. Through this API, users can programmatically access their reports, manage vulnerabilities, and streamline communications with researchers. When used within Pipedream, you can leverage these functionalities to automate workflows, integrate with other services like Slack, GitHub, and Jira, and enhance your security operations by ensuring timely responses and updates.
import { axios } from "@pipedream/platform"
export default defineComponent({
props: {
hackerone: {
type: "app",
app: "hackerone",
}
},
async run({steps, $}) {
return await axios($, {
url: `https://api.hackerone.com/v1/me/organizations`,
headers: {
"Accept": `application/json`,
},
auth: {
username: `${this.hackerone.$auth.api_token_identifier}`,
password: `${this.hackerone.$auth.api_token}`,
},
})
},
})
Choose an API to Connect with HackerOne API#
1-24of2,400+apps by most popular
Example Use Cases#
Automated Vulnerability Alert System: Create a workflow in Pipedream that triggers whenever a new vulnerability report is submitted via HackerOne. This workflow can parse the report details and automatically send alerts to a Slack channel, ensuring that your security team is immediately informed about new potential threats.
Enhanced Issue Tracking Integration: Set up a Pipedream workflow that automatically creates an issue in GitHub or Jira when a new HackerOne report reaches a certain severity level. This helps in prioritizing and tracking the resolution of high-impact vulnerabilities without manual intervention, streamlining your security response process.
Scheduled Report Summaries: Develop a workflow in Pipedream that runs on a scheduled basis (e.g., weekly or monthly) to fetch recent vulnerability reports from HackerOne. It can then compile these into a summary report and email it to your security team or stakeholders. This ensures regular updates on the security landscape and keeps everyone informed about the status of reported vulnerabilities.
Popular HackerOne Integrations#
Popular HackerOne Actions#
Invite a recipient to an organization using their email address. See the documentation
Authentication#
Name Slug: hackeroneHackerOne uses API keys for authentication. When you connect your HackerOne account, Pipedream securely stores the keys so you can easily authenticate to HackerOne APIs in both code and no-code steps.
To retrieve your API Token Identifier and API Token,
- Navigate to your HackerOne account and sign in
- Click the "Organization Settings" option with the gear icon on the left navigation menu.
- Go to “ORGANIZATION SETTINGS” > “API Tokens”
Trusted by 1,000,000+ developers from startups to Fortune 500 companies