# White Hat

A security researcher or hacker who uses their skills legally and ethically to find and fix vulnerabilities.

A **white hat[↗](/white-hat)** is a security researcher or hacker who uses offensive hacking techniques legally and ethically, typically with permission, to find and help fix vulnerabilities rather than exploit[↗](/exploit) them. The term contrasts with "black hat[↗](/black-hat)" hackers, who break into systems for personal gain or malicious purposes.

White hats work as penetration testers, participate in bug bounty[↗](/bug-bounty) programs, or hold in-house security roles, and their findings are usually reported responsibly to the affected organization so the flaw can be patched before it becomes public knowledge or falls into the wrong hands.