Strands HackerOne

HackerOne API tool for Strands Agents. Automate bug bounty research, program monitoring, and report management with AI.

Installation

pip install strands-hackerone

Setup

Get API credentials from HackerOne Settings:

export HACKERONE_USERNAME="your_username"
export HACKERONE_API_KEY="your_api_key"

Usage

Standalone

from strands_hackerone import hackerone

# List programs
hackerone(action="programs", limit=10)

# Check hacktivity
hackerone(action="hacktivity", query="severity:critical")

# View balance
hackerone(action="balance")

With Strands Agent

from strands import Agent
from strands_hackerone import hackerone

agent = Agent(tools=[hackerone])
agent("Find high-paying programs accepting XSS vulnerabilities")

Actions

Examples

Search hacktivity

# Critical vulnerabilities
hackerone(action="hacktivity", query="severity:critical")

# High bounties
hackerone(action="hacktivity", query="bounty:>5000")

# Specific program
hackerone(action="hacktivity", query="program:security")

Get program info

hackerone(action="program_info", program_handle="security")
hackerone(action="program_scope", program_handle="github")
hackerone(action="program_weaknesses", program_handle="security")

Track your activity

hackerone(action="my_reports", limit=25)
hackerone(action="report_details", report_id="274387")
hackerone(action="balance")
hackerone(action="earnings", page=1, limit=50)

AI Agent Examples

Research Assistant

agent = Agent(
    tools=[hackerone],
    system_prompt="Bug bounty research assistant"
)

agent("Find programs with web apps in scope that offer fast payments")

Monitor

agent = Agent(
    tools=[hackerone],
    system_prompt="Monitor HackerOne for important events"
)

agent("Check for new critical disclosures in the last 24 hours")

Troubleshooting

401 Unauthorized
Check HACKERONE_USERNAME and HACKERONE_API_KEY

403 Forbidden
You must be enrolled in the program

Rate Limited
Reduce request frequency, use pagination, cache results

Development

git clone https://github.com/cagataycali/strands-hackerone.git
cd strands-hackerone
pip install -e .
python test_hackerone.py

Resources

• HackerOne API Docs
• Strands Agents

License

MIT

Author

@cagataycali