Skip to main content
GET
List HackerOne reports

Authorizations

Authorization
string
header
required

JWT authentication token

Query Parameters

scope
enum<string>

Listing scope: "program" (default) or "hacker".

Available options:
program,
hacker
program
string[]

Program handle(s) to list when scope is program. May be repeated.

state
string[]

Report state(s) to include. May be repeated.

severity
enum<string>[]

Severity rating(s) to include: none, low, medium, high, critical. May be repeated. Reports without an assigned severity match "none".

Available options:
none,
low,
medium,
high,
critical
keyword
string

Search by title/keyword.

sort
string

Sort value (program scope), e.g. "-reports.created_at".

page_size
integer

Items per page (1-100, default 25).

page
integer

1-indexed page number.

page_token
string

Cursor for the next densified neo_triage page (from next_page_token). Ignored when neo_triage is all.

neo_triage
enum<string>

Filter by Neo triage linkage. yes = has a Neo triage run, no = not yet triaged in Neo, all (default) = no filter. When set to yes/no, the API scans ahead across HackerOne pages to fill page_size matches; next_page_token may be an opaque resume cursor.

Available options:
all,
true,
false

Response

HackerOne report list

reports
object[]
required
next_page_token
string

Cursor for the next densified neo_triage page (pass as page_token). Omitted when neo_triage is all or there is no further page.