HackerOne will require government ID for every bug bounty submission
The August 14th rule covers new and existing accounts, while unpaid vulnerability disclosure programs remain open without verification.
By Ryan Merket · Published
Primary source: International Cyber Digest on X
Why it matters
HackerOne is moving identity checks from payouts and selected sensitive programs to the entry point for all paid research, prioritizing customer compliance over anonymous participation.
HackerOne, led by CEO Kara Sprague, will require every security researcher to verify a government-issued ID before submitting vulnerabilities to any paid bug bounty program on its platform beginning August 14th, 2026.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.