Hack The Box Affiliate Program Review

The Hack The Box affiliate marketing program pays up to 20% commission on referred subscriptions, CTF registrations, and business-solution purchases, tracks conversions through Impact.com, and credits sales made within 90 days of a click. If your audience studies cybersecurity or pentesting, here is how the rate works, who tracks it, and whether the numbers fit your traffic.

Commission: what Hack The Box pays

You earn up to 20% of the purchase value whenever a new user you refer buys a subscription, registers for a CTF event, or picks up a business training package. The payout is a percentage of the sale rather than a flat bounty, so a higher-tier plan returns more than an entry-level one.

The commission is one-time per conversion, credited when a new subscriber completes a qualifying purchase, not a recurring cut on every renewal. For a security blogger sending readers to an annual plan, one converting reader can be worth a meaningful single share of that year's fee.

For a cybersecurity educator whose students buy business or team training, that same 20% applies to larger B2B orders, which lifts the value per conversion well above consumer subscriptions.

How to join and promote

Applications run through the Impact.com campaign, and the team reviews new affiliates weekly. Once approved you get a confirmation email with the program guidelines and can build tracking links inside your dashboard.

Apply through the Hack The Box campaign on Impact.com.
Wait for the weekly review and approval email.
Log in to your Impact.com dashboard and generate your unique links.
Create and track multiple links across your channels.

Approved traffic includes blogs, websites, social profiles, videos, email newsletters, and podcasts, which covers most content-led promotion. Self-referrals are prohibited, so you cannot earn commission on your own signups.

Tracking, attribution, and the platform

Tracking runs on Impact.com, one of the larger independent affiliate networks, so approved partners see clicks and conversions in a standard dashboard without manual reporting. A referral counts when a new user buys within 90 days of clicking your link, giving considered B2B purchases plenty of time to close.

That 90-day attribution window suits an email newsletter or podcast, where a listener may research for weeks before a team signs off on a training budget.

How the 20% model works for you

Because the rate is a one-time percentage of the sale rather than a fixed cost-per-action fee, your earnings scale with what the referral buys instead of being capped at a set amount. A team plan converts into a larger single payout than a solo subscription at the same 20% rate.

Since the commission is one-time rather than recurring, volume and deal size matter more than long retention: a content creator who consistently sends buyers toward higher-value business packages earns more per conversion than one driving only entry-level signups.

Strengths and trade-offs

The clear strengths are a straightforward up to 20% rate that applies across subscriptions, CTF events, and business solutions, a long 90-day attribution window, and tracking on an established network like Impact.com.

On the other side, the commission is one-time rather than recurring, so partners chasing lifetime revenue from renewals will find the model favours fresh conversions over retained accounts.

Tracking and transparency

Running on Impact.com means clicks and conversions are logged in a third-party dashboard rather than an in-house tool you cannot audit. Weekly application reviews also mean you know where your submission stands within days rather than weeks.

Affiliate disclosure: commission terms are set by Hack The Box and can change; confirm the current rate and attribution window on the official affiliates page before you promote.

Is the Hack The Box affiliate program worth it?

If your audience is learning offensive security, pentesting, or CTF skills, the up to 20% commission with a 90-day window on Impact.com is a clean fit, especially for blogs, newsletters, and podcasts that can point readers toward higher-value business training. Partners who need recurring income from renewals should weigh the one-time structure before committing.

Hack The Box affiliate program FAQ

Is the Hack The Box affiliate program legit? Yes. It runs through the official Hack The Box campaign on Impact.com, an established affiliate network that tracks clicks and conversions.

How much can you earn? You earn up to 20% of each qualifying purchase, so a larger business-training order returns a bigger single payout than an entry-level subscription.

How long is the attribution window? A referral counts if the new user buys within 90 days of clicking your link.

Which promotion methods are allowed? Blogs, websites, social profiles, videos, email newsletters, and podcasts are permitted; self-referrals are not.

What tracking platform does it use? The program is managed and tracked through Impact.com, where approved affiliates build and monitor their links.