A white hat hacker (ethical hacker) is a security expert who uses hacking skills with permission to find and fix vulnerabilities before criminals can exploit them.
What white hat hackers do
White hats apply the same techniques as black hat hackers, but with authorisation and within agreed rules. Typical work includes:
- penetration testing of networks, web applications and cloud environments;
- red team exercises that simulate real adversaries end to end;
- vulnerability research in software and hardware, followed by responsible reporting;
- participation in bug bounty programmes on platforms such as HackerOne and Bugcrowd;
- security audits, code reviews and training.
Common certifications include OSCP from OffSec and CEH from EC-Council.
Why white hat hackers matter
Ethical hackers find flaws before attackers do. Many major vulnerabilities, from Heartbleed (2014) to Spectre and Meltdown (2018), were discovered by researchers and fixed through coordinated disclosure: the researcher informs the vendor privately and publishes details only after a patch is available, usually within about 90 days.
The key difference from other hackers is permission. Without a written scope or a bug bounty policy, even well-intentioned testing can be illegal. In 2022 the US Department of Justice announced that it would not prosecute good-faith security research under the Computer Fraud and Abuse Act, and many companies publish a vulnerability disclosure policy with “safe harbour” terms.
Best practices for ethical hacking
- Get written authorisation and a clear scope before testing.
- Avoid accessing more data than needed and never keep sensitive information.
- Report findings promptly through official channels.
- Give vendors reasonable time to fix issues before publishing.
