THREAT OPS › Threat News › Agents vs. agents: how we triage HackerOne reports for $2 each, 85% as well as a human
Agents vs. agents: how we triage HackerOne reports for $2 each, 85% as well as a human
<p>Large language models (LLMs) made it trivially cheap to generate vulnerability reports. In the first half of 2026 alone, our <a href="https://hackerone.com/elastic">HackerOne</a> bug bounty program received over 1,390 reports, more than the full-year totals for 2024 and 2025 combined. Every one of them still requires human attention, so we decided to put agents against agents. If AI can generat
MITRE ATT&CK techniques
Indicators of compromise
- https://hackerone.com/elasticurl
- https://hackerone.com/url
- https://www.anthropic.com/claudeurl
- https://www.packer.io/url
- https://playwright.dev/url