PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Healthy programs make for happy hackers. Introducing response SLAs

hackerone.com | blog | #bug-bounty | #metrics | #program-management | #hackerone | #platform-update | #sla
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne introduces response SLAs: efficiency indicators shown to hackers, SLA inbox labels, a program health dashboard and program pausing, with targets like 1-day first response.
Published
Collected

Related coverage

blog · hackerone.com
New CTEM Metrics That Matter: How to Brief Your Board on AI-Accelerated Exposure
HackerOne argues vulnerability counts no longer brief boards well and proposes CTEM metrics like Time to Validate, as AI-accelerated discovery compresses exploitation timelines.
blog · hackerone.com
The Journey to 100% Responsive Programs
HackerOne platform update: 84% of active programs now respond within 5 business days and triage within 10, stale reports were cleaned up without penalties, and reputation is awarded at triage.
blog · yeswehack.com
This is why your exposure window is too long
Exposure windows run long because time-to-resolve averages hide stalls in acknowledgement, triage capacity and researcher communication; measuring each lifecycle stage reveals the bottlenecks.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
Back