white hat A hacker who does not engage in offensive security practices (cracking). White hat hackers may still engage in red teaming or penetration testing but in a strictly legal manner ususlly only on machines which they own or which they are authorized to test. Contrast with black hat.