PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Agentic AI: The Future of Exposure Management

hackerone.com | blog | #ai-security | #agentic-ai | #exposure-management | #hackerone | #security-operations | #vulnerability-validation | #hai
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne's Hai has grown from a single copilot into four cooperating agents—Deduplication, Priority Escalation, Report Assistant, and Insight—cutting reported validation time from 20 minutes to 5.
Published
Collected

Related coverage

blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
When Security Teams Can Prove Exposure Risk, They Can Reduce It Faster
HackerOne launches new Hai capabilities: agentic validation, prioritization, and exploitation, plus Linear integration, helping teams prove what's exploitable and move from findings to fixes faster.
blog · hackerone.com
56% Faster Validation: An Agentic Workflow for Continuous Exposure Reduction
HackerOne's agentic validation powered by Hai cuts validation time by 56%, tackling eligibility drift, duplicate churn, and context-free prioritization within a continuous CTEM loop.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
blog · hackerone.com
CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments
This coverage gives security teams current context for monitoring, validation, and remediation.
Back