Strands HackerOne: Bug Bounty Automation 🔒

HackerOne API tool for Strands Agents—automate bug bounty research, program monitoring, and report management.

Installation

pip install strands-hackerone

Setup

Get API credentials from HackerOne Settings:

export HACKERONE_USERNAME="your_username"
export HACKERONE_API_KEY="your_api_key"

Quick Start

from strands import Agent
from strands_hackerone import hackerone

agent = Agent(tools=[hackerone])
agent("Find high-paying programs accepting XSS vulnerabilities")

Actions

Action	Description	Parameters
`programs`	List bug bounty programs	`page`, `limit`
`program_info`	Get program details	`program_handle`
`program_scope`	View program scope	`program_handle`
`program_weaknesses`	List accepted vuln types	`program_handle`
`hacktivity`	Browse public disclosures	`query`, `page`, `limit`
`my_reports`	List your reports	`page`, `limit`
`report_details`	Get report details	`report_id`
`balance`	Check current balance	-
`earnings`	View earnings history	`page`, `limit`
`payouts`	View payout history	`page`, `limit`

Examples

Search Hacktivity

# Critical vulnerabilities
hackerone(action="hacktivity", query="severity:critical")

# High bounties
hackerone(action="hacktivity", query="bounty:>5000")

# Specific program
hackerone(action="hacktivity", query="program:security")

Get Program Info

hackerone(action="program_info", program_handle="security")
hackerone(action="program_scope", program_handle="github")
hackerone(action="program_weaknesses", program_handle="security")

Track Your Activity

hackerone(action="my_reports", limit=25)
hackerone(action="report_details", report_id="274387")
hackerone(action="balance")
hackerone(action="earnings", page=1, limit=50)

AI Agent Use Cases

Research Assistant

agent = Agent(
    tools=[hackerone],
    system_prompt="Bug bounty research assistant"
)

agent("Find programs with web apps in scope that offer fast payments")

Monitor

agent("Check for new critical disclosures in the last 24 hours")

AI-powered bug bounty hunting. 🔒