PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HackerOne is Excited to Launch Triage Ratings for Customers and Hackers

hackerone.com | vulnerability | #bug-bounty | #vulnerability-disclosure | #triage | #hackerone | #feedback
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne launches Triage Ratings: after each report, hackers and customers can rate the triage experience one to five, with early customer feedback averaging 4.6/5.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · bugcrowd.com
The hidden cost of agentic pentesting
Bugcrowd finds agentic pentesting tools submit overwhelmingly low-signal reports on public bug bounty programs, while top findings still come from skilled humans; triage absorbs the hidden cost.
vulnerability · hackerone.com
HackerOne Rolls Out Pentest Review System for Customers and Pentesters
HackerOne rolls out pentest review enhancements: in-platform ratings from customers and pentesters, public testimonials on hacker profiles, and a 360-degree feedback loop to track engagement quality.
vulnerability · hackerone.com
Advanced Workflows with Inbox Views
HackerOne adds customizable Inbox Views: security teams can create, reorder and remove saved filters to build advanced disclosure workflows, such as Tier 1/Tier 2 triage, per-platform queues or separate bounty stages.
vulnerability · hackerone.com
Edit a Report's Vulnerability Types
HackerOne adds the ability for security teams to edit a report's vulnerability types after submission, with every change recorded in the report timeline for more accurate vulnerability data.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
Back