Finding Fast, Fixing Slow: The Rising Exposure Debt

HackerOne's 12-month analysis (ending March 2026) finds AI-assisted discovery drove a ~76% rise in submissions while mean and median MTTR improved (~80% and >70%), but remediation throughput and resolution rates fell sharply—leading to a ~21x increase in unresolved vulnerabilities and ~25x growth in unresolved criticals—creating rising exposure debt; the report urges focusing on overall risk reduction, expanding remediation capacity, and applying AI to remediation workflows.