Common Name for Vulnerability Disclosure Program on HackerOne
What is the common name for a vulnerability disclosure program opened by companies in platforms such as HackerOne?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests the terminology surrounding external security testing and responsible disclosure, specifically distinguishing between general ethical hacking and compensated bug bounty initiatives.
The common name for a vulnerability disclosure program opened by companies on platforms such as HackerOne is a bug bounty program. This page establishes that these programs incentivize ethical hackers to report security flaws in exchange for rewards.
Candidates often confuse 'White-hat hacking program' or 'Ethical hacking program' with 'Bug bounty program'. While white-hat hacking describes the activity, it does not capture the commercial incentive structure (bounties) central to platforms like HackerOne.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A bug bounty program is the industry-standard term for an initiative where organizations invite external security researchers to find and report vulnerabilities in their systems. These programs are typically hosted on dedicated platforms like HackerOne or Bugcrowd, which facilitate the communication and reward distribution process. The key differentiator is the financial or reputational incentive provided to participants for valid findings.Why the Other Options Are Wrong
Options A, C, and D describe the nature of the work or generic concepts but lack the specific commercial context implied by platforms like HackerOne. 'White-hat hacking' and 'Ethical hacking' refer to the methodology and intent of the attacker, not the structured engagement model. 'Vulnerability hunting' is an activity rather than the name of the formal program or contract mechanism.Community Comment Notes
The community consensus strongly supports option B, with multiple users confirming that "Bug bounty program" is the correct terminology. As one user noted, these programs invite researchers to find vulnerabilities "often rewarded with monetary incentives." Another comment simply affirmed, "Correct answer is B," highlighting the straightforward nature of this definition-based question.Exam Strategy
Focus on learning the specific industry terms used by major vendors and platforms. For example, distinguish between internal penetration testing contracts and external bug bounty programs. Understanding the ecosystem of tools and services (like HackerOne) helps clarify the terminology associated with them.
Frequently Asked Questions
What is the difference between a bug bounty and a pentest?
Bug bounties are crowdsourced, ongoing, and incentivized by rewards per finding. Pentests are usually time-bound, scoped engagements performed by specific firms or individuals.
Why is 'White-hat hacking' not the best answer?
White-hat hacking describes the ethics of the hacker, not the specific business model or platform-based program structure that defines a bug bounty initiative.