Common Name for Vulnerability Disclosure Program on HackerOne
Short answer
B The common name for a vulnerability disclosure program opened by companies on platforms such as HackerOne is a bug bounty program.
Question
Key Takeaways
This question tests the terminology surrounding external security testing and responsible disclosure, specifically distinguishing between general ethical hacking and compensated bug bounty initiatives.
The common name for a vulnerability disclosure program opened by companies on platforms such as HackerOne is a bug bounty program. This page establishes that these programs incentivize ethical hackers to report security flaws in exchange for rewards.
Common mistake: Candidates often confuse 'White-hat hacking program' or 'Ethical hacking program' with 'Bug bounty program'. While white-hat hacking describes the activity, it does not capture the commercial incentive structure (bounties) central to platforms like HackerOne.
Expert Analysis
Why the Answer Is Correct
A bug bounty program is the industry-standard term for an initiative where organizations invite external security researchers to find and report vulnerabilities in their systems. These programs are typically hosted on dedicated platforms like HackerOne or Bugcrowd, which facilitate the communication and reward distribution process. The key differentiator is the financial or reputational incentive provided to participants for valid findings.
Why the Other Options Are Wrong
Options A, C, and D describe the nature of the work or generic concepts but lack the specific commercial context implied by platforms like HackerOne. 'White-hat hacking' and 'Ethical hacking' refer to the methodology and intent of the attacker, not the structured engagement model. 'Vulnerability hunting' is an activity rather than the name of the formal program or contract mechanism.
Community Comment Notes
The community consensus strongly supports option B, with multiple users confirming that "Bug bounty program" is the correct terminology. As one user noted, these programs invite researchers to find vulnerabilities "often rewarded with monetary incentives." Another comment simply affirmed, "Correct answer is B," highlighting the straightforward nature of this definition-based question.
Exam Strategy
Focus on learning the specific industry terms used by major vendors and platforms. For example, distinguish between internal penetration testing contracts and external bug bounty programs. Understanding the ecosystem of tools and services (like HackerOne) helps clarify the terminology associated with them.
Frequently Asked Questions
What is the difference between a bug bounty and a pentest?
Why is 'White-hat hacking' not the best answer?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
MHafizC 👍 2 Answered BThe right answer should be bug bounty program.
-
bibibi 👍 1 Answered BThe common name for a vulnerability disclosure program opened by companies on platforms such as HackerOne is a "bug bounty program". These programs invite ethical hackers and security researchers to find and report vulnerabilities in their software or systems. In return, researchers are often rewarded with monetary incentives, recognition, or other rewards.
-
getaseadsss 👍 1 Answered BCorrect answer is B "Bug bounty program"
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.