At HackerOne, our mission is to build a safer internet. But we recognize that as a leader in our industry, we have an opportunity and a responsibility to help build a safer and more secure future for our world. As a company, we recognize the existential risks posed by climate change and environmental degradation, and the need for immediate, ambitious future-focused action. HackerOne is committed to executing a science-based strategy that reduces emissions, protects our environment, and drives meaningful change toward greater sustainability.

Our Environmental Policy centers around four pillars:

• People - Engage, educate, and empower the HackerOne community to adopt a sustainability mindset, implement sustainable practices, increase environmental awareness, and incorporate our environmental goals into their day-to-day work.
• Practices - Focus on reducing emissions, improving resource efficiency and waste management, and implementing enterprise-wide sustainability practices.
• Influence - Collaborate with our partners and suppliers to prioritize sustainability in our supply chain and alignment with HackerOne’s environmental commitments and values.
• Continuous Improvement - Setting science-based environmental targets, continually measuring progress, and moving the needle toward greater, scalable sustainability.

v.1 December 2023

People

HackerOne team members are innovative, passionate, and thoughtful problem-solvers. Weknowthattogetherourindividualactionscanbeaforce for collective, impactful change. HackerOne supports all efforts by our team members to address sustainability issues in their daily lives, at work, and in our local communities. According to a September 2023 study by Cornell and Microsoft, remote workers that incorporate sustainable practices into their daily lives can have a 54% lower carbon footprint compared with on-site workers. HackerOne provides employees with information and resources on best environmental practices for working remotely.

Additionally, HackerOne’s Stronger Together program provides all hackeronies with two community service days per calendar year to volunteer in their communities and support a cause they feel passionate about. Employees have used these opportunities to clean up beaches, revitalize local parks, and advocate for cycling over traditional auto transport – just to name a few! HackerOne will continue to create, encourage, and amplify sustainability and environmentally-focused action, including environmental awareness and Earth Month campaigns, participation in the Company’s bike-sharing program, and green challenges for all HackerOne team members.

Practices

HackerOne is committed to adopting climate-friendly practices and prioritizing sustainability in our enterprise operations to reduce our global environmental footprint.

As a digital-first company, HackerOne has been able to achieve a significantly lower carbon footprint than other businesses of similar sizes within the industry. The substantial majority of HackerOne’s interactions with cust Community Members and customers and employees take place

v.1 December 2023

virtually, without the need to travel, commute, or maintain an office. This results in a corresponding reduction of emissions related to travel, heating, cooling, and electricity. Because we are a digital-first technology company, any use of physical raw materials, natural resources, or paper waste is minimal, if not non-existent.

For our key operations and digital assets, HackerOne runs its software platform on a public cloud. This method uses considerably less cloud computing capacity than most other technology and cybersecurity companies of comparable sizes and mitigates the Company’s energy usage overall. As we scale, we will continue to monitor our practices and policies, including our travel policies, to ensure that they align with our sustainability goals.

To the extent HackerOne has maintained a physical office presence, we selected an energy-efficient office that is accessible by public transportation and bike. In the office, HackerOne practices center around minimizing waste through recycling, reducing single-use plastics, providing reusable dishware, and providing a means for organic waste disposal.

HackerOne integrates sustainable principles of circularity in both our facilities and hardware practices. Since 2018, HackerOne has partnered with external vendors to donate or recycle any electronic equipment that has reached the end of its usable life for the company, including laptops, monitors, keyboards, cables, and other hardware. We will continue to effectively manage office equipment and will reduce waste to landfills by selecting high-quality products with longer lifespans, ensuring the equipment we purchase is produced with sustainability in mind, and providing employees with options for keeping their electronics post-employment.

v.1 December 2023

Influence

At HackerOne, we strive to Lead with Integrity–to hold ourselves and others accountable. Werecognizethatourabilitytoinfluenceourbusinesspartners is an important opportunity to advance value chain sustainability on a larger scale. Accordingly, HackerOne looks to engage collaboratively with its suppliers and vendors to ensure the company’s business partners are actively aligned in our shared objective to reduce our collective carbon footprint and embrace more sustainable practices.

HackerOne’s supplier policies and agreements seek to obtain our business partners’ buy-in toward our company’s near-term and long-term environmental goals and path to net-zero. We are focused on the following:

• Setting and communicating baseline environmental expectations to our suppliers to ensure that our vendors’ practices align with HackerOne’s environmental strategy;
• Implementing policies that engage our suppliers to make their own decarbonizing commitments; and
• Integrating sustainability requirements into our procurement evaluation and selection process.

For example, HackerOne selected its supplier for branded gear based on its robust, proven commitments to sustainable practices, including carbon-neutral shipping, upcycling, Climate Neutral certified status, EcoVadis silver medal certification. Similarly, the vendor responsible for HackerOne’s data centers was able to commit to powering operations with at least 95% renewable energy (and a goal to achieve 100% renewable energy by 2025).

We will continue to seek opportunities to collaborate with our business partners on sustainability initiatives to bolster shared environmental goals.

v.1 December 2023

Continuous Improvement

We believe it takes collaboration, ambition, trust in science-based research, and follow-through to tackle issues related to climate change. Despite our progress toward a net-zero carbon future, we recognize that our journey is far from over. As an inherently future-focused company, we strive to apply this mindset in our sustainability strategy and look for ways to continue to build upon our progress. In support of the shared global goal of collectively achieving a just and equitable transition to net zero and limiting global warming to 1.5°C, HackerOne commits to:

• Continue developing the infrastructure needed to more accurately measure and reduce our carbon footprint, which may involve partnering with third-party consultants, non-profits, etc.
• Reducing absolute scope 1 and scope 2 greenhouse gas emissions by 50% by 2030, and making efforts to measure and commit to reducing scope 3 emissions.
• Working towards a 100% renewable energy goal by 2030. This would mean procuring renewable energy or claims to renewable energy that are equivalent to the electricity we use globally on an annual basis.
• Working towards Net-Zero carbon by 2040.
• Exploring market instruments, such as renewable energy purchases or carbon credits, or other offset programs to reduce and eventually eliminate our remaining emissions.
• Continue monitoring developing sustainability requirements and laws to ensure compliance.
• We will continue to monitor, reduce, and, to the extent possible, eliminate greenhouse gas emissions across both our operations and entire value chain, as well as spur systemic changes that will achieve emissions reductions and improve sustainability at scale.

v.1 December 2023