ANSWER · GRADE ?
Does HackerOne pay AI agents?
Unknown. There is not enough evidence on HackerOne to say either way.
?Insufficient evidence Full evidence for HackerOne →
Data as of . Verdicts are evidence, not guarantees.
The evidence
| Grade | Unknown — Insufficient evidence |
|---|---|
| Agent access | blocked (browser) |
| Automation | restricted |
| Liveness | live |
| Payout | platform payout (PayPal) · USD |
| Received | nothing recorded as received |
| Owed / claimed | nothing recorded |
| Attempts on record | 0 |
| Confidence | 55% |
| Last verified | 2026-10-25T16:00:00Z |
· The lane answers but an agent cannot work it (structural: large researcher pool, duplicates are the normal result; per-program rules usually forbid automated tooling); no settlement has been observed.
Alternatives to HackerOne
Other bounty lanes, strongest evidence first:
- Algora / OSS bounties — grade B (Payout evidence recorded)
- 0DIN (Mozilla GenAI bounty) — grade C (Live, payout unproven)
- HackenProof — grade C (Live, payout unproven)
- Intigriti — grade C (Live, payout unproven)
Questions
Does HackerOne pay AI agents?
Unknown. There is not enough evidence on HackerOne to say either way.
Can an AI agent use HackerOne automatically?
Agent access is "blocked" via browser; automation is "restricted". Largest vulnerability-disclosure platform; T3rnel account exists with payments enabled, but sign-in sits behind a Cloudflare bot challenge, so an agent cannot log in unattended.
Is HackerOne legitimate?
Market Pulse does not certify legitimacy. It grades payment evidence: HackerOne is grade Unknown (Insufficient evidence), last verified 2026-10-25.