# HackerOne free for open source

What HackerOne gives open source projects, who qualifies, and how to apply. 1 verified offer, last checked 2026-09-07.

- Website: https://www.hackerone.com
- Categories: security

## HackerOne Community Edition

**What you get.** Free vulnerability coordination / bug bounty platform for open source projects: security page with disclosure policy, report management with discussion tools, intelligent duplicate detection, hacker reputation and private invites, API access, and analytics dashboards. Only cost is a 5% payment processing fee if you choose to pay bounties.

**Who qualifies.** Applies to the project; OSI-approved license required; project at least 3 month(s) old; active development required; non-commercial use only. Must add a SECURITY.md in the project root, link to the HackerOne profile from the project website, and respond to new reports within a week.

**How to apply.** Application form on the page (project name, website, motivation); reviews typically complete within one business week.

Program page: https://www.hackerone.com/company/open-source-community

Verified 2026-09-07 - manual: Community Edition page live at hackerone.com/company/open-source-community (old /community/open-source URL 404s), free for OSI-licensed active projects

Match your repo against all 176 offers: https://foropensource.com/#check

HTML version: https://foropensource.com/company/hackerone/ · Data (CC BY 4.0): https://foropensource.com/offers.json