HackerOne

Report an error

You can submit without verifying; verified claims are reviewed first. SOC 3 reports, certificates, auditor letters and bridge letters are accepted. Restricted-use SOC 2 reports are refused.