PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Gain Actionable, Data-backed Insights with HackerOne Recommendations

hackerone.com | blog | #bug-bounty | #vulnerability-management | #automation | #product-update | #security-program | #hackerone
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne Recommendations analyzes program data monthly against 20 trigger conditions, drawing on 500,000+ valid vulnerabilities to suggest improvements to triage, payouts, and benchmarks.
Published
Collected

Related coverage

blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · netspi.com
2021 Cyber Security Predictions: A Forecast for the Future
A NetSPI director offers eight predictions for 2021: automation paired with human context, security hiring and budgets, risk-based security, insider threats, and external attack surface management.
blog · netspi.com
Security Orchestration vs. Automation: What's the Difference?
NetSPI clarifies the difference between security orchestration and automation: scripts handle single tasks, while orchestration connects systems into a consistent vulnerability lifecycle process.
blog · netspi.com
Enterprise Vulnerability Management
NetSPI presented at Secure360 on formalizing enterprise vulnerability management, arguing few organizations manage vulnerabilities, and released a white paper outlining a four-phase approach.
blog · netspi.com
Metrics: Your Security Yardstick – Part 2 – Defining Metrics
Follow-up on building security metrics: map controls to requirements, pull data from reliable sources like vulnerability management tools, then combine low-level metrics into higher-level indicators.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
Back