Supporting AI Data Security Through HackerOne

This brief outlines new CISA-led guidance on AI data security—covering risks like data poisoning, adversarial attacks, metadata manipulation, and supply chain threats—and describes how HackerOne’s services (AI red teaming, vulnerability disclosure programs, dataset validation, and continuous monitoring) map to the guidance and NIST frameworks to help organizations adopt risk-based, secure-by-design AI practices.