It sounds to me like a good reason not to use HackerOne to run your bug disclosure program. Frankly, having been a PSIRT member myself, I'd be very leery of using HackerOne.
Not a member of The Register?
Create a new account
Remember me on this computer?
The Register - Independent news and views for the tech community. Part of Situation Publishing
Biting the hand that feeds IT © 1998–2022