To do this, you need to add transparency and connect the people working on programs and projects,” he explained. HackerOne gets 20 percent of any bounty payment if and when a payment is made.