> For the complete documentation index, see [llms.txt](https://docs.hackenproof.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.hackenproof.com/welcome/readme/services-we-provide.md).

# Services we provide

HackenProof helps Web3 and digital product companies find and fix vulnerabilities with the help of a global community of verified security researchers, hackers, and independent auditors. Our team hand

**Bug Bounty Programs**

Continuous security testing where researchers are rewarded for valid vulnerabilities.

* Public bug bounty. Also called a vulnerability rewards program (VRP). It's open to the whole community, with no fixed end date, and you pay only for valid findings.
* Private bug bounty. You hand-pick a limited number of proven researchers. This suits early-stage products or sensitive scopes.
* Bug Bounty Whitelabel. Run a bug bounty program under your own brand, powered by HackenProof. [Learn more](https://hackenproof.com/bug-bounty-platform) 

**Vulnerability Disclosure Program (VDP)**

Give researchers a clear, safe channel to report security issues they find in your products, with a published disclosure policy and a structured intake process.
\
[Learn more](https://hackenproof.com/vulnerability-disclosure-program)

**Penetration Testing**

Scoped, time-boxed security testing of your applications and infrastructure, finished with a report of findings and remediation guidance.
\
[Learn more](https://hackenproof.com/penetration-testing-services) 

**Security Audits**

* Curated Audit. Hand-selected researchers chosen for their expertise in your stack.
* Crowdsourced Audit. A time-limited competitive audit with a predictable budget for valid findings. Only the defined scope is shared with verified researchers. It comes in Traditional and Conditional formats.
* DualDefense. A crowdsourced audit layer on top of your third-party audit, to catch what a single review can miss. [Learn more](https://hackenproof.com/cybersecurity-audit-services) 

**CTF Platform**

Capture the Flag competitions for Web3 and digital product companies. Use them to test your team's skills, engage the security community, or recruit talent.
\
[Learn more](https://hackenproof.com/ctf-platform) 

**Live Hacking Events**

A 1–5 day event where a group of top researchers tests your product alongside your team. It gives you fast results, educates your security team, and raises your visibility in the community.

**Triage & Validation**

Our triage team validates every report, removes duplicates and noise, confirms severity, and mediates between your team and researchers, so you only deal with actionable vulnerabilities.
\
[Learn more](https://hackenproof.com/vulnerability-triage)