HackerOne supports the Ukrainian people

Ukraine needs our help! We are speaking up now because we value democracy and the democratization of all processes so that all people can achieve their dreams. The Russian invasion of Ukraine threatens not only Ukraine but also this democratic ideal. We are now witnessing an assault on everything we believe in. We cannot stand by and ignore these actions. We stand with #TechForUkraine and encourage other tech companies to join us.

At HackerOne, we believe in hacking for good. Ethical hackers make the internet safer every day by finding flaws before malicious actors do. For HackerOne’s business to work, and for the entire digital society to function, we must always stand up for the level playing field; we believe in transparency and here’s what we’re doing.

First, as we work to comply with the ever changing sanctions, we’ll withdraw all programs for customers based in Russia, Belarus, and the occupied areas of Ukraine.?

Second, we advocate that our hacker community consider participating in the HackenProof program to strengthen the digital infrastructure of Ukraine.?

It’s important to note that HackerOne will NOT engage in offensive hacking. Our role is to make software more secure, not less secure. Whatever skill we have in the company or in our hacking community, we will direct it towards constructive work that makes our digital society safer, not less safe.

Third, while hacking for good aims to make the internet safer, humanitarian donations will also do good for the world. HackerOne, our customers, and our community members have often supported worthy causes through bounty donations to charity. Today we are encouraging the world to hack for the good of the Ukrainian people.

To support them, we encourage members of the HackerOne community to donate their bounties or portions of their bounties to UNICEF, which provides Ukrainian children and families access to basic services including water and sanitation, health care, and emergency cash assistance. We will immediately donate $25,000 to UNICEF, and on top of that, we’ll match donations dollar for dollar up to $100,000 for the next three months. Furthermore, HackerOne customers can choose to offer matching donations in their bug bounty programs.?

Lastly, although we will discontinue business in the sanctioned region, we aim to keep vulnerability disclosures open — rules and sanctions permitting. Our goal is never to say no to valid vulnerability reports. These disclosures make the digital world safer, not less so. Hackers residing in sanctioned areas cannot participate in financial transactions, so any rewards for their vulnerability disclosure will be re-routed to UNICEF.?

We believe in making the world a better place, and this is our contribution and encouragement to help make a difference.