# HackerOne

PlexTrac integrates with HackerOne, a platform that facilitates vulnerability coordination and bug bounty programs. It connects organizations that want to improve the security of their software and systems with a community of ethical hackers, also known as white-hat hackers, who are skilled in finding and reporting security vulnerabilities.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F7yEiNZstfb59831ez9XU%2Fhackerone.jpg?alt=media&#x26;token=59836116-1fc4-4a11-b1de-53436760553d" alt=""><figcaption></figcaption></figure></div>

{% hint style="info" %}
This is a licensed feature.
{% endhint %}

## Integration Overview

An integration with HackerOne and PlexTrac consists of three parts:

1. Enabling the feature via the license key.
2. Obtaining the HackerOne API Key Identifier and HackerOne API Key values.
3. Configuring PlexTrac to complete the setup.&#x20;

### Enabling HackerOne&#x20;

If the license is needed within a tenant, the phrase “License Required” with a link to the Support Portal will display within the HackerOne card on the [Integrations page](https://docs.plextrac.com/plextrac-documentation/product-documentation-1/account-management/account-admin/tools-and-integrations/integrations) of the **Admin Dashboard**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F6d7tMr6TYodiLJkdZdMn%2Fimage.png?alt=media&#x26;token=a49f14c7-f771-42a7-9f43-e6b8cdc7cae3" alt=""><figcaption></figcaption></figure></div>

When a license is obtained, insert the license key into PlexTrac via the **Admin Dashboard>Licensing** page.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FR2dSMD7wsZhQkcrsRtZ3%2Fimage.png?alt=media&#x26;token=405df95a-86a6-48e5-bbd5-073f621f8633" alt=""><figcaption></figcaption></figure></div>

When the integration is available, a “Connect” button will display within the HackerOne card on the [Integrations page](https://docs.plextrac.com/plextrac-documentation/product-documentation-1/account-management/account-admin/tools-and-integrations/integrations) of the **Admin Dashboard**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FgRssnXihdrv7WM6yL8wE%2Fimage.png?alt=media&#x26;token=022ef311-e572-4bb2-919b-661165dd0de0" alt=""><figcaption></figcaption></figure></div>

### Creating an API Token <a href="#step-1-creating-an-api-token" id="step-1-creating-an-api-token"></a>

Once the feature has been enabled, the next step is to obtain the HackerOne API Key Identifier and HackerOne API Key values.&#x20;

<mark style="background-color:yellow;">Step 1</mark>: Log in to [HackerOne's API token page](https://hackerone.com/plextrac_h1b/api).

<mark style="background-color:yellow;">Step 2</mark>: Click **Create API Token**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FUr2qpl1Chv9HG7X18RSF%2Fimage.png?alt=media&#x26;token=60c0f995-6fe0-46f7-bdf6-97066329b98e" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 3</mark>: Enter an identifier value into the provided box. Click **Create**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FE1ivWReLMehyzStZhsyB%2Fimage.png?alt=media&#x26;token=86f853e3-6e53-4b9a-87b0-bd7348ad8e34" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 4</mark>: Copy the API key to a secure place (it will not be accessible after this point). Click **I have stored the API Token**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FX58gFJr9YbZmavwqLd5V%2Fimage.png?alt=media&#x26;token=a2de223e-5aa3-421a-9c7e-e5be6be25642" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 5</mark>: The API token just created appears at the top of the API page (an email will also be sent confirming the action). Click **Manage groups** in the row of the token.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2Fn0TNAxCWufs7OYzXbwDg%2Fimage.png?alt=media&#x26;token=d7747a9a-debe-4ef8-a5f3-e4e4caad9260" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 6</mark>: Check the desired boxes to define the user's permissions for this group. Click **Apply changes**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FL0M7ii4NkR7Nqva2wspw%2Fimage.png?alt=media&#x26;token=d5c7bf2c-0563-4918-8259-8fcc7d69c73d" alt=""><figcaption></figcaption></figure></div>

### Configuring PlexTrac

<mark style="background-color:yellow;">Step 1</mark>: From the **Admin Dashboard**, click **Integrations** under "Tools & Integrations."

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2Ff4Pijfj7tUk0RbN0LDDm%2Fimage.png?alt=media&#x26;token=1f67a51c-1a45-4cc4-98ec-bb112be1e124" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 2</mark>: Click **Connect** in the HackerOne card.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FbgwI8mZKQ58SpkE6lXTp%2Fimage.png?alt=media&#x26;token=746d61e8-1546-4cd7-aa90-94d5471efcf5" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 3:</mark> A modal appears with three tabs. On the first tab, enter the following information:

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FHTdD1LUx9UlOnUOQxyoK%2Fimage.png?alt=media&#x26;token=565af9ff-bedf-438f-9909-83a2cd01edb0" alt=""><figcaption></figcaption></figure></div>

1. **Integration Name**: This value is seen by users when selecting which tool to import findings from into a report, so pick a value that quickly identifies the integration.
2. **HackerOne API Key identifier:** This was the value entered when creating the API token within HackerOne.\
   ![](https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FFdcP1J0Lw2ah25mid30Z%2Fimage.png?alt=media\&token=269a7b45-acda-4c29-b8fa-d61a37c31925)
3. **API Key:** This key was provided by HackerOne and saved for future use. \
   ![](https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FqtSadfTiNXswME8xiSYV%2Fimage.png?alt=media\&token=4bca627f-bbc6-45a5-aed8-f84c28ae497a)

<mark style="background-color:yellow;">Step 4</mark>: Click **Save**.&#x20;

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F9QJFIqMWZ0cvI2cwxhjB%2Fimage.png?alt=media&#x26;token=999aff01-8515-4b9b-89fb-3ae607fad9c8" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 5</mark>: In the "Mapping" tab, select which fields to import from HackerOne to PlexTrac.

{% hint style="info" %}
HackerOne syncs data to PlexTrac, but updates in PlexTrac do not sync back to HackerOne.
{% endhint %}

Required fields are grayed out in the "Synch" column. The other fields are optional and can be removed from import by clicking the checkbox to remove the checkmark. Click **Save**.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F9rmCwvMj8K43roh3fHbM%2Fimage.png?alt=media&#x26;token=733ce7b2-cbf7-400a-938c-7430f50ade08" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 6:</mark> A message will validate that the synch was successful. Click **Got It**.

<div align="left"><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FoWNwUv7B2EZHVRde78Ov%2Fimage.png?alt=media&#x26;token=a84d3c84-8b23-47e7-8656-b5f005e23d81" alt=""></div>

HackerOne now appears as "connected" on the **Integrations** page.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FtuhqiUC8EuSTer2eZlkV%2Fimage.png?alt=media&#x26;token=83652b2a-010b-4a6f-939b-0fed40fa7e85" alt=""><figcaption></figcaption></figure></div>

Findings from HackerOne can now be[ imported into a report](https://docs.plextrac.com/plextrac-documentation/product-documentation/reports/findings/importing-findings-via-an-integration).

## Disabling Integration

The integration can be temporarily turned off and on via the toggle button under "Enabled."&#x20;

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F5mrXawiyEvRcDg64m51d%2Fimage.png?alt=media&#x26;token=d2049798-cfca-443e-9fbb-22de595c0fde" alt=""><figcaption></figcaption></figure></div>

## Editing Integration

Click **Edit** under the "Actions" column to adjust existing settings.&#x20;

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FldvFpFwX9BVTKQuXGfjt%2Fimage.png?alt=media&#x26;token=4e3f6581-c98d-44b8-a21a-91965065d8d9" alt=""><figcaption></figcaption></figure></div>

## Viewing Logs

<mark style="background-color:yellow;">Step 1:</mark> Click **Edit** under the "Actions" column.&#x20;

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FSwzbzY13T2n5PtwP2jKj%2Fimage.png?alt=media&#x26;token=8374abd4-4069-437a-9831-efd1a716582a" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 2:</mark> Click the **Sync Log** tab.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FmgLKhSEBsH4blqq9Nu9s%2Fimage.png?alt=media&#x26;token=7cacd863-a997-4be7-99a1-f858c0313ac3" alt=""><figcaption></figcaption></figure></div>

<mark style="background-color:yellow;">Step 3:</mark> Click **View** of the desired log to read.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FfW0cenU8BlBx5li132Xg%2Fimage.png?alt=media&#x26;token=c984b9e0-6a7f-4720-8a90-c8c9235f8368" alt=""><figcaption></figcaption></figure></div>

##


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.plextrac.com/plextrac-documentation/product-documentation-1/account-management/account-admin/integrations-and-webhooks/integrations-api/hackerone.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
