PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

They said AI would kill Bug Bounty. The data says otherwise

yeswehack.com | blog | #ai-security | #bug-bounty | #llm | #crowdsourced-security | #triage | #vulnerability-discovery
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

YesWeHack argues frontier AI models are amplifying, not killing, Bug Bounty: AI floods teams with findings that need human triage and prioritisation, while hunters already use AI to find bugs faster.
Published
Collected

Related coverage

blog · yeswehack.com
‘Having humans in the loop’: Crédit Agricole Personal Finance & Mobility on the value of Bug Bounty
Security leaders from Crédit Agricole Personal Finance & Mobility explain how they scoped their bug bounty program, the value of crowd diversity and triage, and plans for AI-related scopes.
blog · yeswehack.com
Scaling Bug Bounty triage in the AI era
How YesWeHack scales Bug Bounty triage as AI floods programs with reports: a six-step workflow pairs targeted AI support with certified experts to validate each submission before it reaches customers.
blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · specterops.io
AI for Offensive Security: What Works, What Does Not, and How to Adopt It
SpecterOps maps where AI helps offensive security (recon, tooling, vuln discovery) and where it still fails, stressing that results hinge on the harness: context, tools, state, independent validation, and human judgment.
blog · projectzero.google
From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code
How Project Zero evolved Project Naptime into Big Sleep, using large language models to find vulnerabilities in real-world software, with early results and observations.
blog · projectzero.google
Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models
Project Naptime evaluates the offensive security capabilities of large language models, presenting a methodology, tooling setup, and early successes finding real vulnerabilities.
Back