HackerOne Code

Plans and prices

Every plan, in full

On the record

AI data use

HackerOne says it does not use customer source code to train, fine-tune, or improve AI models, and approved model providers are prevented from using input or output data for training.docs.hackerone.com · read 11 Oct 2026

Code protection

HackerOne says source-code transfers use TLS 1.2 or higher, stored code uses AES-256 encryption, and the code-analysis system runs in a dedicated AWS VPC.docs.hackerone.com · read 11 Oct 2026

Code retention

Source code is stored encrypted during a scan and deleted within 24 hours after the scan completes; raw source code is not retained in scan results.docs.hackerone.com · read 11 Oct 2026

Compliance

HackerOne’s Trust Center lists SOC 2 Type 2, ISO 27001, GDPR, PCI DSS, and FedRAMP among its certifications and frameworks.trust.hacker.one · read 11 Oct 2026

Detection

It detects vulnerabilities in commits and pull requests using SAST, SCA, reasoning models, and an optional frontier cyber AI model analysis.hackerone.com · read 11 Oct 2026

Developer tools

The product delivers recommendations into GitHub, GitLab, Bitbucket, and Azure DevOps.hackerone.com · read 11 Oct 2026

Human review

Human-in-the-loop evaluation confirms and ranks critical issues by exploitability and business impact.hackerone.com · read 11 Oct 2026

Languages

HackerOne says H1 Code covers all major programming languages and frameworks.hackerone.com · read 11 Oct 2026

Purpose

H1 Code is an AI code security solution that detects, validates, and helps fix vulnerabilities in codebases.hackerone.com · read 11 Oct 2026

Remediation

H1 Code provides fixes tailored to the customer’s environment and code style, with human expertise for challenging cases.hackerone.com · read 11 Oct 2026

Support

The H1 Code page says HackerOne typically responds to inquiries within one business day.hackerone.com · read 11 Oct 2026

Supported repositories

HackerOne’s source-code security documentation lists GitHub, GitLab, Bitbucket, and Azure DevOps for cloud-hosted and self-hosted integrations.docs.hackerone.com · read 11 Oct 2026

Triage

Its agents assess code logic, architecture, and data flows to reduce noise and surface relevant findings.hackerone.com · read 11 Oct 2026

Alternatives to HackerOne Code

RE RhodeCode EnterpriseWebWindows+3 C CubicWebWindows+3 B BitoWebWindows+4 C CodeRabbitWebWindows+5 RB Review BoardWebWindows+4 E EllipsisWebMac+3 S SourceryWebWindows+5 GC Gerrit Code ReviewWebWindows+4

Every alternative, ranked