All your bugs are belong to us

from here

No one has perfect security, not even the security companies. What's important is how they handle it and it seems like HackerOne handled it pretty well.