How do white-hat hackers differ from gray-hat and black-hat hackers?

In the context of cybercrime, hackers are categorized based on the legality and intent of their actions. While these labels are sometimes used as moral descriptors, they are not absolute indicators of ethical behavior.1

The primary differences between these groups are:

• White-hat hackers: These professionals engage in legal hacking, often employed by companies or governments to test systems for vulnerabilities so they can be fortified against threats. While often called the good guys, this is an oversimplification, as white-hat hackers may also be employed by oppressive regimes to target enemies.12
• Gray-hat hackers: These individuals access computer systems without authorization but generally do not intend to cause harm. They often report the vulnerabilities they discover to the system owners, sometimes requesting a fee for their findings.1
• Black-hat hackers: These individuals break into systems with malicious intent, such as stealing sensitive data. However, even within this category, motivations can vary; for example, some black-hat "hacktivists" may engage in illegal activities for causes they believe serve the common good.1