---
id: 1218
title: "What We’ve Learned from 5 Months of Hackbot Activity"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/ai-hackbots-security-testing-update"
published_at: "2025-06-26 18:01"
tags: ["ai-security", "bug-bounty", "burp-suite", "offensive-security", "xbow", "hackbot", "hallucination"]
phying_url: "https://phying.com/item/1218"
lang: en
---

# What We’ve Learned from 5 Months of Hackbot Activity

## Summary

Five months after AI hackbots joined HackerOne, XBOW topped the US leaderboard and Burp Suite added MCP support. Hallucinated vulnerability reports remain the key challenge.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2025-06-26 18:01
- **Original:** https://www.hackerone.com/blog/ai-hackbots-security-testing-update
- **Phying News:** https://phying.com/item/1218