A white hat hacker (also known as an ethical hacker) is an IT security specialist who attacks a system with the written authorization of its owner to find vulnerabilities before malicious attackers do. They use the same tools and techniques as a pirate. The key difference is consent.
The term originates from American Westerns, where the hero wore a white hat and the villain a black hat. This led to three categories: white hats who protect, black hats who attack, and grey hats who operate in between.
In this guide: the definition of a white hat hacker, what they do during an engagement, how they differ from black hat and grey hat hackers, the legal framework in France, and when a company should consider hiring one.
Definition: What is a White Hat Hacker?
A white hat hacker possesses the skills of an attacker and the ethics of a defender. They break in to fix, never to harm.
A white hat hacker is an expert who performs authorized penetration tests (pentests) and security audits. They search for vulnerabilities in a website, application, network, or organization, demonstrate their exploitability, and then provide recommendations for remediation.
Ethical Hacker, White Hat: One Profession
"Ethical hacker" is a common term for a white hat hacker. They are also referred to as "white hat" hackers or, in a contractual context, offensive security auditors. All these terms describe the same professional: someone paid to test a system with the owner's explicit permission. The "white" hat metaphor contrasts with the "black" hat of a malicious hacker.
The Five Rules of a White Hat
- Authorization: Nothing begins without a signed contract and a clearly defined scope (addresses, applications, dates, permitted techniques).
- Proportion: They demonstrate the vulnerability without disrupting production or exfiltrating more data than necessary.
- Confidentiality: What they discover remains strictly between them and their client.
- Traceability: Every action is documented and included in the final report.
- Utility: The deliverable is not just a list of vulnerabilities, but a prioritized remediation plan.
What a White Hat Hacker Does During an Engagement
- Reconnaissance: Mapping what is exposed on the internet (subdomains, services, public leaks).
- Vulnerability Discovery: Exploiting weaknesses like injection flaws, broken access control, weak passwords, and misconfigurations.
- Controlled Exploitation: Demonstrating the real-world impact, such as gaining access to an administrator account or a customer database.
- Reporting: Documenting each vulnerability with proof, severity level, and recommended fixes.
- Re-testing: Verifying that the vulnerabilities have been successfully remediated.
To see what this work looks like, we publish our own offensive challenge write-ups on the Writeups page: 8 as of writing this, from platforms like HackTheBox and Root-Me, including Atlas and Store. The format mirrors that of the reports delivered to clients.
White Hat, Black Hat, Grey Hat: What's the Difference?
All three types of hackers often possess similar technical skills. What distinguishes them is authorization and intent.
White Hat Hacker: The Defender
- Scope: Mandated by the company, with a written contract and defined scope.
- Engagements: Penetration testing, code audits, configuration audits, phishing simulations, red teaming.
- Legal Status: Legal, due to explicit authorization.
- Goal: To help the company fix vulnerabilities before they are exploited.
Black Hat Hacker: The Attacker
- Scope: None; they act without authorization.
- Actions: Intrusion, data theft, ransomware deployment, access resale, denial-of-service attacks.
- Legal Status: Illegal. In France, unauthorized access to a system is punishable under articles 323-1 et seq. of the Penal Code.
- Goal: Financial gain, sabotage, or espionage.
Grey Hat Hacker: In Between
- Scope: They find vulnerabilities without invitation and then notify the target, sometimes requesting a reward.
- Legal Status: Ambiguous intent, but unauthorized access remains an offense, even with good intentions.
- Example: Someone accesses a merchant website's customer area and then informs the site about the vulnerability. The site may press charges.
There is a legal avenue for independent researchers: bug bounty programs, where companies publish their rules and scope. Hackers who adhere to these rules are considered white hats.
Why Hire a White Hat Hacker for Your Company?
An attacker only needs one vulnerability. A white hat hacker finds them proactively, on a schedule, and provides a detailed report.
What You Gain
- Vulnerabilities discovered before attackers, with proof of their impact.
- A prioritized remediation plan, understandable by your technical teams.
- Audit evidence for your clients, insurers, and compliance requirements (GDPR, NIS2, ISO 27001).
- Re-testing to confirm that fixes are effective.
When to Engage an Ethical Hacker
- Before launch: for new websites, applications, or APIs.
- After an incident: to understand how an attacker gained access. During an ongoing incident: for a cyberattack or a hacked website.
- Regularly: annually, or after significant changes.
- For compliance: for companies subject to NIS2 regulations or large clients requiring audits.
White Hat Services at White-Hat
- Penetration testing for websites, applications, or networks.
- Source code audits.
- Phishing simulations to assess your team's response.
- Red team exercises: comprehensive attacks from external access to sensitive data.
- NIS2 compliance audits.
Prefer to compare multiple independent ethical hackers? The marketplace Hackersdate allows you to post a need and receive proposals from verified experts.
Frequently Asked Questions About White Hat Hackers
What does "white hat hacker" mean?
It refers to an ethical hacker who only tests a system with the owner's written permission. The opposite is a "black hat" hacker, who acts without authorization.
Is a white hat hacker legal?
Yes, under one condition: the owner's written authorization with a defined scope. Without it, the same action becomes unauthorized access, regardless of intent.
What's the difference between an ethical hacker and a pentester?
A pentester is the most common role of a white hat hacker, performing penetration tests. "Ethical hacker" is a broader term that also includes vulnerability research, bug bounty hunting, and red teaming.
What certifications do white hat hackers have?
The most recognized include OSCP (Offensive Security), CEH (EC-Council), and more advanced ones like OSEP, CRTO, or OSWE. Training platforms like HackTheBox and Root-Me serve as practice grounds, and published write-ups demonstrate real-world skill levels.
How does an initial contact work?
It starts with a 30-minute, no-obligation call to define the scope and budget. You can contact us here.
Request an Audit
Read more