What We’ve Learned from 5 Months of Hackbot Activity

This HackerOne post reviews the recent emergence of AI-powered hackbots and agentic vulnerability scanners, highlights challenges from AI hallucinations producing false or low-signal vulnerability reports, and recommends that bug bounty programs update policies, maintain bounty tables, and invest in validation tools while researchers adopt AI tools responsibly.