> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pwnbook.app/llms.txt
> Use this file to discover all available pages before exploring further.

# HackerOne

> Manage vulnerability reports from your HackerOne program in Pwnbook.

<img src="https://mintcdn.com/pwnbook/noJyYhCscAD7TYUE/logos/hackerone_dark.png?fit=max&auto=format&n=noJyYhCscAD7TYUE&q=85&s=8234b1e7ef115f4db635cc48fbb745b7" alt="HackerOne" style={{ height: "32px", marginBottom: "16px" }} width="196" height="364" data-path="logos/hackerone_dark.png" />

## Overview

The HackerOne integration pulls vulnerability reports from your bug bounty or VDP program into Pwnbook. Review, triage, and track reports without switching between platforms.

## Prerequisites

* A HackerOne account with access to a program
* A HackerOne API token (program-scoped)
* Admin or Owner access in Pwnbook

## Setup

<Steps>
  <Step title="Generate a HackerOne API token">
    1. Log in to HackerOne and go to **Settings → API Token**.
    2. Create a new token scoped to your program.
    3. Copy the **Identifier** and **Token** values.
  </Step>

  <Step title="Configure in Pwnbook">
    1. Go to **Organization Settings → Marketplace → HackerOne**.
    2. Enter your **API Identifier**, **API Token**, and **Program handle** (the subdomain of your HackerOne program URL).
    3. Click **Save & Test**.
  </Step>
</Steps>

## What's available

| View              | Description                                                                  |
| ----------------- | ---------------------------------------------------------------------------- |
| **Reports**       | All reports with severity, state (new, triaged, resolved), and bounty status |
| **Triage queue**  | Reports awaiting triage, sorted by severity                                  |
| **Report detail** | Full report content, timeline, and attachments                               |

## Workbench card

The **HackerOne** workbench card shows open report counts by severity and the depth of the current triage queue.