The Executive Dashboard provides a high-level view of your HackerOne program’s performance, making it easier to communicate key security insights to executives, board members, and other executive stakeholders. It summarises program activity into clear visuals and topline metrics—no manual work required. To learn more about the features and functionality available on all dashboards, see the Dashboards documentation.
To find the Executive Dashboard, click Analytics in the left navigation, then click Executive Dashboard.
Organization Overview
The Organizational overview section at the top of the Executive Dashboard provides a high-level snapshot of your program’s performance. It highlights four key metrics to help you quickly understand your program's impact.
Vulnerabilities Remediated - The number of valid reports resolved during the selected timeframe, with year-over-year (YoY) comparisons, reflects the organization’s progress in addressing security issues surfaced through the program.
Mean Time to Remediation (MTTR) - The mean number of days between report submission and resolution, and whether that value is below, meets, or exceeds your selected SLA. A lower MTTR indicates faster response and remediation performance.
Hackers Submitting Reports - The total number of unique hackers who submitted at least one valid report in the selected period with year-over-year (YoY) comparisons. This demonstrates the breadth of external researcher engagement with your program.
Rewards Paid - The total amount of bounty rewards paid to hackers for valid submissions with year-over-year (YoY) comparisons. This shows the organization’s investment in security through responsible disclosure.
Submissions by Engagement
Shows the number of submissions during the selected time period, segmented by program type of Bug Bounty, VDP, Challenge, and Pentest. On this chart, you can:
Explore - This enables you to take a deep dive into your data to see what areas you need to focus on to improve your program.
Show the data in table format - switch between the graph and table views.
More—Export the data from the chart, view it in full-screen mode, and show point labels.
Submissions
Shows the number of submissions during the selected time period, the number of submissions during the same timeframe of the previous year, and a benchmark (the median of all HackerOne customer submissions). On this chart, you can:
Explore - This enables you to take a deep dive into your data to see what areas you need to focus on to improve your program.
Add a custom benchmark - Specify the kinds of programs you want to compare your program to based on Industry, company headcount, submission severity, program type, asset type, and report validity.
Show the data in table format - switch between the graph and table views.
More—Export the data from the chart, view it in full-screen mode, and show point labels.
Submissions by Severity
Shows how reports are distributed by severity class, as indicated on the report. On this chart, you can:
Explore - This enables you to take a deep dive into your data to see what areas you need to focus on to improve your program.
Show the data in table format - switch between the graph and table views.
More—Export the data from the chart and view it in full-screen mode.
Active Hackers
Shows how many hackers are new to your program versus returning. This is an indication of how actively hackers are participating in your program. The chart does not show all-time new versus returning hackers, but rather indicates the relative rate of return quarter-over-quarter. For each quarter displayed, a new hacker is a hacker who submitted a report in that quarter but did not submit a report in the prior quarter; a returning hacker is a hacker who both submitted a report in that quarter and submitted a report in the prior quarter. The chart also compares these metrics to those of the same time last year.
Note: this chart can only be aggregated by quarter, regardless of the interval chosen in the interval selector.
On this chart, you can:
Explore - This enables you to take a deep dive into your data to see what areas you need to focus on to improve your program.
Show the data in table format - switch between the graph and table views.
More—Export the data from the chart and view it in full-screen mode.
Time to Remediation
Shows the median and average times to resolve, the target (as customized for your program), and a benchmark (the median of all HackerOne customer submissions). Time to close is the elapsed time from when a report is submitted to when a report is closed. These five closed report states will stop the timer: resolved, informative, not applicable, duplicate, and spam. On this chart, you can:
Explore - This enables you to take a deep dive into your data to see what areas you need to focus on to improve your program.
Add a custom benchmark - Specify the kinds of programs you want to compare your program to based on Industry, company headcount, submission severity, program type, asset type, and report validity.
Show the data in table format - switch between the graph and table views.
More—Export the data from the chart, view it in full-screen mode, and show point labels.
Top Weaknesses by Valid Permission Percentage
Shows the Top CWE weaknesses seen as a percentage of the submissions to your program during a selected time period, the percentage of submissions during the same timeframe of the previous year, and a benchmark (the median of all HackerOne customer submissions). On this chart, you can:
Explore - This enables you to take a deep dive into your data to see what areas you need to focus on to improve your program.
Add a custom benchmark - Specify the kinds of programs you want to compare your program to based on Industry, company headcount, submission severity, program type, asset type, and report validity.
Show the data in table format - switch between the graph and table views.
More—Export the data from the chart and view it in full-screen mode.