# Connect Intercom to HackerOne > Automate the flow of security reports, bug disclosures, and customer communications between HackerOne and Intercom so your teams stay aligned and customers stay informed. **Canonical page:** https://tray.ai/connectors/intercom-hackerone-integrations/ **Intercom connector:** https://tray.ai/connectors/intercom-integrations/ **Intercom documentation:** https://tray.ai/documentation/connectors/service/intercom **HackerOne connector:** https://tray.ai/connectors/hackerone-integrations/ **HackerOne documentation:** https://tray.ai/documentation/connectors/service/hackerone ## Overview Intercom and HackerOne handle two functions that rarely talk to each other — customer communication and security vulnerability management. When a researcher discloses a bug through HackerOne that affects end users, support teams in Intercom need timely, accurate information to answer customer questions with confidence. Integrating these two platforms through tray.ai means security findings, remediation timelines, and disclosure updates move cleanly between your security and support organizations instead of getting stuck in Slack threads. Security vulnerabilities don't exist in a vacuum — they directly affect customers, and customers expect to hear from you. Without a direct integration between HackerOne and Intercom, support agents are often the last to know about active vulnerabilities, leaving them unable to answer questions or reach out to affected users. Connecting HackerOne's structured vulnerability data with Intercom's customer messaging lets you automate proactive notifications when vulnerabilities are disclosed or patched, keep support agents up to date with internal notes about known issues, and route customer-reported security concerns into HackerOne for proper triage. The result is a faster, more transparent response loop that protects your customers and your reputation. ## Use cases ### Proactive Customer Notification on Vulnerability Disclosure When a HackerOne vulnerability reaches a disclosed or resolved state, automatically trigger an Intercom message to affected customer segments. Customers hear about security issues that may impact their data or usage before they need to ask. - Reduce inbound support volume by messaging customers before they reach out - Build customer trust through transparent, timely security communications - Cut manual coordination between security and customer success teams ### Sync HackerOne Bug Reports as Intercom Internal Notes Automatically push new and updated HackerOne vulnerability reports into relevant Intercom conversations as internal notes. Support agents handling related customer queries get instant context on severity, status, and expected resolution timelines without leaving Intercom. - Give support agents real-time vulnerability context inside their existing workflow - Reduce escalation delays from back-and-forth between support and security teams - Keep internal notes current as HackerOne report statuses change ### Route Customer-Reported Security Issues to HackerOne When a customer flags a potential security issue through an Intercom conversation, automatically create a structured HackerOne report and notify the security team. This closes the gap between customer-facing support and your formal vulnerability disclosure program. - Make sure no customer-reported security concern gets dropped - Standardize how security issues are captured and triaged regardless of source - Speed up initial triage by auto-populating HackerOne reports with data from the Intercom conversation ### Escalate Critical HackerOne Findings to Intercom Support Teams For HackerOne reports classified as high or critical severity, automatically send an Intercom announcement or internal broadcast to your support team. Frontline agents get the heads-up they need to handle related customer inquiries consistently. - Make sure support teams are never blindsided by major security incidents - Keep a consistent customer-facing narrative during critical vulnerability windows - Cut the time it takes to inform support staff from hours to seconds ### Track Vulnerability Resolution Status in Customer Conversations When a HackerOne report moves from triaged to resolved, automatically update linked Intercom conversations with a resolution note or close them if the customer issue was security-related. Conversation records stay accurate without manual follow-up. - Keep customer conversation histories complete and auditable - Automatically close resolved security-related support tickets - Give customer success managers a clear view of which security issues have been addressed ### Aggregate Security Metrics into Intercom for Customer Success Reviews Pull HackerOne program metrics — mean time to resolution, disclosure rates, bounty statistics — and surface them inside Intercom to enrich customer success conversations. When an enterprise customer asks about your security posture, you'll have real data ready. - Let CSMs speak confidently about your security program during customer reviews - Show customers a mature, data-driven vulnerability management process - Cut the time CSMs spend hunting for security metrics across separate tools ### Tag Intercom Users Affected by Specific Vulnerabilities When a HackerOne report is resolved and a CVE is published, automatically tag affected users in Intercom based on product version, feature usage, or account type. Targeted follow-up messaging becomes straightforward, and customer success teams can prioritize outreach without digging through spreadsheets. - Send post-disclosure messages only to customers who are actually impacted - Avoid alerting unaffected customers with irrelevant security notices - Simplify post-incident customer analysis with consistent, automated tagging ## Templates ### HackerOne Vulnerability Disclosed → Intercom Customer Notification Automatically sends a targeted Intercom message to affected customer segments whenever a HackerOne vulnerability moves to disclosed status, so customers stay informed without manual effort from your security or support teams. Connectors used: HackerOne, Intercom ### New HackerOne Report → Intercom Internal Agent Note Pushes a structured internal note into relevant Intercom conversations whenever a new HackerOne report is submitted, so support agents have immediate awareness of emerging security issues that may explain what customers are reporting. Connectors used: HackerOne, Intercom ### Intercom Security Conversation → New HackerOne Report Watches incoming Intercom conversations for security-related keywords and automatically creates a structured HackerOne vulnerability report, routing the issue to the right program for formal triage and remediation. Connectors used: Intercom, HackerOne ### Critical HackerOne Report → Intercom Team Broadcast Automatically broadcasts an internal Intercom alert to your support team whenever a critical or high-severity HackerOne report is triaged, so agents are ready to handle related customer inquiries before they escalate. Connectors used: HackerOne, Intercom ### HackerOne Report Resolved → Close Related Intercom Conversations When a HackerOne vulnerability is marked resolved, this template automatically finds linked Intercom conversations and either closes them with a resolution note or sends the customer a follow-up confirming the fix. Connectors used: HackerOne, Intercom ### Weekly HackerOne Program Summary → Intercom CSM Digest Generates a weekly digest of HackerOne program activity — new reports, resolution rates, bounty payouts — and delivers it as an Intercom note or message to customer success managers so they're prepared for client conversations. Connectors used: HackerOne, Intercom ## Challenges Tray.ai solves ### Keeping Support Teams Informed Without Breaching Security Disclosure Protocols Security teams are often restricted in what vulnerability information they can share before a formal disclosure, making it hard to give support agents enough context without accidentally leaking sensitive details. **How Tray.ai helps:** tray.ai workflows can be configured to release only pre-approved, sanitized summaries to Intercom at specific HackerOne status milestones — triaged, resolved, or disclosed — so agents get the right information at the right time without exposure to raw vulnerability data. ### Mapping HackerOne Vulnerability Scope to Affected Intercom User Segments Not every vulnerability affects every customer, and sending blanket security notifications can alarm people unnecessarily and erode trust. Pinpointing which Intercom users are actually impacted by a specific HackerOne report means cross-referencing product data that may live in multiple systems. **How Tray.ai helps:** tray.ai's data transformation and conditional logic let you enrich HackerOne report data with product metadata, then filter Intercom users by attributes like plan type, feature flags, or account region — so only genuinely affected customers receive security communications. ### Avoiding Duplicate Reports When Customers Report Security Issues via Intercom When multiple customers report the same security issue through Intercom simultaneously, creating a HackerOne report for each conversation can produce dozens of duplicate submissions that overwhelm the security team and slow down triage. **How Tray.ai helps:** tray.ai workflows can include deduplication logic that checks HackerOne for existing open reports matching key attributes before creating a new one. When a match is found, the workflow links the Intercom conversation to the existing report and notifies the customer without adding noise for the security team. ### Handling Rate Limits and API Pagination Across Both Platforms Both Intercom and HackerOne impose API rate limits, and bulk operations — notifying thousands of customers or querying large report histories — can quickly exhaust quotas if not managed carefully, leading to failed workflows and incomplete data syncs. **How Tray.ai helps:** tray.ai's built-in rate limit handling, retry logic, and pagination support automatically manage API throttling for both connectors. Workflows queue and batch requests intelligently, so data processing completes without manual intervention even during high-volume operations. ### Maintaining an Audit Trail Across Security and Customer Communication Events Compliance and security teams often need a full audit trail showing exactly which customers were notified about a vulnerability, when, and with what message. Manually correlating Intercom message logs with HackerOne disclosure records is slow and easy to get wrong. **How Tray.ai helps:** tray.ai logs every workflow execution with full input and output data, giving you a tamper-evident record of every Intercom message triggered by a HackerOne event. Those logs can be exported to a data warehouse or SIEM, so compliance teams get a complete, queryable audit trail linking customer notifications directly to the originating vulnerability report. ## Learn more - Intelligent Integration: https://tray.ai/platform/intelligent-ipaas/ - Merlin Agent Builder: https://tray.ai/platform/merlin-agent-builder/ - Agent Gateway for MCP: https://tray.ai/platform/agent-gateway/ - Book a demo: https://tray.ai/contact/