“We call them security researchers, but ultimately they’re ‘white hat’ hackers,” says Kaplan.”They’re hacking for good.”