HackerOne CEO says humans still better than AI at judging business impact of vulnerabilities
Original title: What human hackers still do better than AI, according to HackerOne’s CEO
According to HackerOne CEO Kara Sprague, humans excel at assessing business consequences of flaws while AI finds vulnerabilities at scale
In an interview, HackerOne CEO Kara Sprague discusses how humans retain an edge in judging vulnerability impact for organizations compared to AI. The 2026 HackerOne Security Research Report shows 85% of researchers are building AI skills, with business logic flaws as the fastest-growing category. AI-assisted submissions have increased, but routine findings may earn less while critical ones pay more. The crowd model is strengthened by AI but requires human judgment for context and consequences.
- 85% of respondents building AI skills
- 68% say AI pushed toward more complex bugs
- 72% identify business logic flaws as fastest-growing
- Routine medium-severity bugs likely to earn less
- Valid AI reports rose 222% in two years
From the original article
5 min read at helpnetsecurity.com
AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, what AI does to the crowd model, and why routine medium-severity findings may pay less.
By Mirko Zorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.