HackerOne StrawberryRead every group, draft every invitation, approve in one pass
It reads every group your HackerOne account holds, drafts the changes that follow, and hands you a card for each one before a single group moves.
Open the group. Check it against something else. Write the change. Move to the next one. That is the HackerOne afternoon nobody can hand off, and a companion does the whole pass and gives you back the batch, with nothing landing on a group until you approve it.
What it can do is exactly what HackerOne exposes to an account you authorise and nothing beyond it: 3 operations, 1 read and 2 writes. In practice that means it can create an invitation and create a group, and work across the groups, invitations and members.
The HackerOne API stops at HackerOne. A companion does not. The same run opens the customer's website, the supplier portal, the internal tool somebody built in 2019, because it is working the browser you are already signed into rather than calling in from outside it.
What does it already know about your invitations?
1 of the 3 operations is a read.
Your account, not a guess at it: a companion can get members, and the full list below is the whole list, with nothing inferred from HackerOne's documentation.
The groups are what most of this inventory is about, alongside the invitations. A companion can hold all 3 of these operations and forty open tabs in the same pass, which is how an afternoon of HackerOne admin becomes a queue you review.
- Get Members
Can it change a group without asking?
All 2 write operations wait for you.
A companion can create an invitation and create a group, and each one is staged on an approval card first: you see the group, the field and the new value before it lands in HackerOne.
Nothing in HackerOne is sent, changed or deleted on your behalf without that click, and a rejected card leaves the group exactly as it was. The gate is the same one on every surface, described at security.
- Create Invitation
- Create Group
Can it get members every morning by itself?
Yes.
Saved as a routine, the HackerOne groups pass runs at the hour you pick: the Monday sweep, the overnight refresh, the Friday check. Keep Awake holds the machine awake for the length of a run, so a scheduled pass finishes with the lid closed.
The operations playbook catalogues the other recurring shapes of the access reviews, the HackerOne groups sweep among them, and finished runs are published at real runs.
Experience Strawberry for free
DownloadTrusted by fast-growing companies worldwide
Frequently asked questions
Strawberry is free to download and includes AI credits to start. Paid plans begin at $20/month. See pricing. · Reviewed · Canonical facts for AI agents