{
  "openapi": "3.0.1",
  "info": {
    "title": "HackerOne Scraper",
    "description": "Scrapes public HackerOne data: the Hacktivity disclosed-report feed, the public bug bounty program directory, the public researcher leaderboard, and the public pentester directory.",
    "version": "0.1",
    "x-build-id": "PB8LC3Qr0S8FBn43v"
  },
  "servers": [
    {
      "url": "https://api.apify.com/v2"
    }
  ],
  "paths": {
    "/acts/rl1987~hackerone-scraper/run-sync-get-dataset-items": {
      "post": {
        "operationId": "run-sync-get-dataset-items-rl1987-hackerone-scraper",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    },
    "/acts/rl1987~hackerone-scraper/runs": {
      "post": {
        "operationId": "runs-sync-rl1987-hackerone-scraper",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor and returns information about the initiated run in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/runsResponseSchema"
                }
              }
            }
          }
        }
      }
    },
    "/acts/rl1987~hackerone-scraper/run-sync": {
      "post": {
        "operationId": "run-sync-rl1987-hackerone-scraper",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "inputSchema": {
        "type": "object",
        "properties": {
          "mode": {
            "title": "Mode",
            "enum": [
              "hacktivity",
              "programs",
              "leaderboard",
              "hackers"
            ],
            "type": "string",
            "description": "Which public HackerOne data set to scrape.",
            "default": "hacktivity"
          },
          "maxItems": {
            "title": "Max items",
            "minimum": 0,
            "type": "integer",
            "description": "Maximum number of items to scrape. Set to 0 for unlimited (walks every page until exhausted). Note: the leaderboard mode is always capped at 100 entries by HackerOne itself, regardless of this setting.",
            "default": 100
          },
          "hacktivitySearchQuery": {
            "title": "[hacktivity] Raw search query",
            "type": "string",
            "description": "Optional raw Hacktivity search syntax (the same query language as the search box on hackerone.com/hacktivity), e.g. \"severity_rating:critical\". Combined with programHandle/disclosedOnly below using AND."
          },
          "hacktivityProgramHandle": {
            "title": "[hacktivity] Program handle",
            "type": "string",
            "description": "Only return reports for this program, e.g. \"curl\" for hackerone.com/curl. Leave empty for all programs."
          },
          "hacktivityDisclosedOnly": {
            "title": "[hacktivity] Disclosed reports only",
            "type": "boolean",
            "description": "Only return reports that have been publicly disclosed (these are the ones with full report titles/URLs; non-disclosed reports only expose metadata such as votes, program, and timestamps).",
            "default": false
          },
          "hacktivityPageSize": {
            "title": "[hacktivity] Page size",
            "minimum": 1,
            "maximum": 100,
            "type": "integer",
            "description": "Number of Hacktivity items requested per page.",
            "default": 25
          },
          "hacktivityIncludeFullReport": {
            "title": "[hacktivity] Include full report detail",
            "type": "boolean",
            "description": "For publicly disclosed reports only, fetch the full report write-up (reportBody), human-authored team/researcher summaries (humanSummaries), the public participant list, severity/weakness/attachments, and the full activity/discussion timeline including comment/reply message text (activityTimeline[].message). Costs one extra REST call plus one extra GraphQL call per disclosed report (slower, and triggers the hacktivity-full-report charge), so it defaults to off.",
            "default": false
          },
          "programsSearchQuery": {
            "title": "[programs] Search query",
            "type": "string",
            "description": "Free-text search, matching the real search box on hackerone.com/directory/programs. Case-insensitive substring match against the program's name and its policy page text (and, for external/VDP-only programs, the same two fields on their external program record) -- e.g. \"shopify\" returns the Shopify program itself plus other programs whose policy mentions Shopify. Combined with Offers bounties below using AND."
          },
          "programsOffersBounties": {
            "title": "[programs] Offers bounties",
            "enum": [
              "any",
              "true",
              "false"
            ],
            "type": "string",
            "description": "Filter the program directory by whether the program pays cash bounties.",
            "default": "any"
          },
          "programsIncludeScope": {
            "title": "[programs] Include target assets (scope)",
            "type": "boolean",
            "description": "Fetch each program's structured scope (target assets: URL/source code/mobile app/etc., asset identifier, eligibility for bounty/submission, max severity, instructions) from its public policy/scope page. Costs one extra GraphQL call per program (slower, and triggers the program-scope-detail charge), so it defaults to off. Programs that don't expose public scope (private/invite-only) get an empty scope list, not an error.",
            "default": false
          },
          "programsIncludeBountyTable": {
            "title": "[programs] Include bounty table by severity",
            "type": "boolean",
            "description": "Fetch each program's bounty table (reward amounts per severity: low/medium/high/critical, plus currency) from its public policy page. Costs one extra GraphQL call per program (slower, and triggers the program-scope-detail charge), so it defaults to off. Programs without a public bounty table (VDP-only / private) get a null bountyTable, not an error.",
            "default": false
          },
          "leaderboardKey": {
            "title": "[leaderboard] Leaderboard key",
            "enum": [
              "ALL_TIME_REPUTATION",
              "HIGHEST_REPUTATION",
              "HIGH_CRIT_REPUTATION",
              "OWASP_TOP_10",
              "HIGHEST_REPUTATION_BY_COUNTRY",
              "CTF_POINTS",
              "HACKTIVITY_UPVOTES",
              "UP_AND_COMERS",
              "ASSET_TYPES"
            ],
            "type": "string",
            "description": "Which leaderboard ranking to scrape. All-time reputation needs no time range. All other keys are time-scoped and require leaderboardYear (optionally + leaderboardQuarter) to be set.",
            "default": "ALL_TIME_REPUTATION"
          },
          "leaderboardUserType": {
            "title": "[leaderboard] User type",
            "type": "string",
            "description": "Optionally restrict to a HackerOne user type, e.g. \"hacker\". Leave empty for the default (all)."
          },
          "leaderboardYear": {
            "title": "[leaderboard] Year",
            "minimum": 2013,
            "type": "integer",
            "description": "Required for all leaderboard keys except ALL_TIME_REPUTATION, e.g. 2026."
          },
          "leaderboardQuarter": {
            "title": "[leaderboard] Quarter",
            "minimum": 1,
            "maximum": 4,
            "type": "integer",
            "description": "Optional quarter (1-4) to further scope a time-based leaderboard. Leave empty for the full year."
          },
          "hackersPageSize": {
            "title": "[hackers] Page size",
            "minimum": 1,
            "maximum": 100,
            "type": "integer",
            "description": "Number of pentester-directory profiles requested per page.",
            "default": 25
          },
          "hackersIncludeTrackRecord": {
            "title": "[hackers] Include track record",
            "type": "boolean",
            "description": "Fetch each hacker's public track record from their profile page: rank, reputation, signal/impact (with percentiles), resolved report count, thanks received, badges, and public program reviews. Costs one extra GraphQL call per hacker (slower, and triggers the hacker-track-record charge), so it defaults to off.",
            "default": false
          },
          "proxyConfiguration": {
            "title": "Proxy configuration",
            "type": "object",
            "description": "HackerOne's public GraphQL endpoint was not observed to block or rate-limit plain requests from a datacenter IP, so no proxy is used by default. Enable one here if you start seeing blocking.",
            "default": {
              "useApifyProxy": false
            }
          }
        }
      },
      "runsResponseSchema": {
        "type": "object",
        "properties": {
          "data": {
            "type": "object",
            "properties": {
              "id": {
                "type": "string"
              },
              "actId": {
                "type": "string"
              },
              "userId": {
                "type": "string"
              },
              "startedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "finishedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "status": {
                "type": "string",
                "example": "READY"
              },
              "meta": {
                "type": "object",
                "properties": {
                  "origin": {
                    "type": "string",
                    "example": "API"
                  },
                  "userAgent": {
                    "type": "string"
                  }
                }
              },
              "stats": {
                "type": "object",
                "properties": {
                  "inputBodyLen": {
                    "type": "integer",
                    "example": 2000
                  },
                  "rebootCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "restartCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "resurrectCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "computeUnits": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "options": {
                "type": "object",
                "properties": {
                  "build": {
                    "type": "string",
                    "example": "latest"
                  },
                  "timeoutSecs": {
                    "type": "integer",
                    "example": 300
                  },
                  "memoryMbytes": {
                    "type": "integer",
                    "example": 1024
                  },
                  "diskMbytes": {
                    "type": "integer",
                    "example": 2048
                  }
                }
              },
              "buildId": {
                "type": "string"
              },
              "defaultKeyValueStoreId": {
                "type": "string"
              },
              "defaultDatasetId": {
                "type": "string"
              },
              "defaultRequestQueueId": {
                "type": "string"
              },
              "buildNumber": {
                "type": "string",
                "example": "1.0.0"
              },
              "containerUrl": {
                "type": "string"
              },
              "usage": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "integer",
                    "example": 1
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "usageTotalUsd": {
                "type": "number",
                "example": 0.00005
              },
              "usageUsd": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "number",
                    "example": 0.00005
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}