PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Turning Incomplete Submissions into Actionable Intelligence

hackerone.com | blog | #ai-security | #bug-bounty | #agentic-ai | #exposure-management | #vulnerability-disclosure | #report-quality | #hackerone | #security-operations | #hai | #report-validation
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne's Report Assistant Agent checks submissions in real time for scope, structure, and completeness against program policy, reducing analyst back-and-forth as part of the Hai agentic AI system.
Published
Collected

Related coverage

blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · portswigger.net
How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.
blog · bugcrowd.com
The hidden cost of agentic pentesting
Bugcrowd finds agentic pentesting tools submit overwhelmingly low-signal reports on public bug bounty programs, while top findings still come from skilled humans; triage absorbs the hidden cost.
blog · wiz.io
Scan for Good: Using AI to discover and fix high-priority exposures across public services and critical infrastructure
Wiz's Scan for Good pairs AI scanning with human researchers to find public exposures in critical infrastructure and nonprofits, driving hundreds of fixes with Google DeepMind and CISA support.
blog · netspi.com
Vulnerability Disclosure Submission Standard?
The author argues the industry lacks a standard vulnerability disclosure channel and proposes RFC2142 mailboxes such as security@ and abuse@ as a simple convention for routing reports.
Back