Early access: the directory is still filling out, and every rating here is a reported experience.
NR Unrated
Sony
Sony HackerOne
3 more reviews needed for a grade
Write a review Claim this company profile

Work at Sony? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.

Ask BugRater to submit it

Private. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.

Program metrics HackerOne · published

HackerOne’s own figures for this program, read from its public page, not reported by researchers and not part of the BugRater grade. Captured 2 Oct 2026.

What it pays, by severity

Critical amount not published 209 reports
High amount not published 733 reports
Medium amount not published 1,562 reports
Low amount not published 1,330 reports

Intake & responsiveness · last 90 days

Reports received
261
in 90 days
Resolved
3,852
all time, last one 2 days ago
Participants
1,957
hunters engaged
Response efficiency
92%
meeting its targets, HackerOne’s figure
SLA misses
0
targets missed
Reports received · day by day, last 15 days 243–261
4 Sep 261 reports 2 Oct

Response targets it sets itself

First response
1 day
Triage
2 days
Bounty
30 days
Resolution
90 days

A target the program declared, not a measurement of it being met.

Getting in the door

Open to submit. Nothing HackerOne publishes stands between a hunter and a first report here.

Over 42 days (22 snapshots): intake up 30 reports; response efficiency down 1 points.

See how this programme’s report load compares to others →

Reviews

0 published

No reviews yet.

Be the first to review

Who this program credits

2,081 credited

Researchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.

# Researcher Reputation Recognised / submitted
1 0xz5zf 963 143 / 162 88%
2 mik317 769 117 / 167 70%
3 sameerphad72 712 111 / 146 76%
4 sheikhrishad0 652 102 / 131 78%
4 linkks 314 47 / 83 57%
5 arielrachamim 497 71 / 74 96%
6 pudsec 449 72 / 75 96%
7 lordjerry0x01 372 59 / 81 73%
8 ell0guvn0r 364 52 / 58 90%
9 yusuf_furkan 315 50 / 90 56%
10 duahaubadao 313 49 / 51 96%
11 todayisnew 310 47 / 51 92%
12 basant0x01 293 44 / 130 34%
12 ba56adcb299ff13a87475bf 181 20 / 51 39%
13 d0xing 263 39 / 44 89%
14 themarkib0x0 254 48 / 68 71%
15 pprab 238 35 / 43 81%
16 tr3jer 214 34 / 36 94%
17 erh 203 28 / 31 90%
18 akichia 198 32 / 40 80%
19 vulnera 194 57 / 95 60%
20 n0x496n 182 27 / 31 87%
21 yumi 177 24 / 37 65%
22 samani15 173 30 / 53 57%
23 tolga 165 25 / 26 96%

Showing the top 25 of 2,081 credited on HackerOne.

Program profile HackerOne · imported

Facts published by HackerOne on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 1 Oct 2026.

Secure@Sony

Responsiveness
92% HackerOne’s figure
Swag
Offered
Currency
USD
Submissions
Open
Launched
Feb 2018
Scope entries
2 HackerOne’s count

Scope

2 assets
AssetTypeEligibilityMax severity
Security vulnerabilities that are identified in Sony products or in website domains owned, operated, or controlled by Sony are in scope. OTHER submit only Critical
So-net (Sony Network Communications Inc.) OTHER out None