Elastic Security Labs built an AI-powered vulnerability triage system for their HackerOne bug bounty program that uses Claude LLM in an eight-stage analysis pipeline with an independent adversarial review, achieving 85% agreement with human analysts at ~$2 per report. The system processes untrusted, attacker-controlled input at every stage, making prompt injection, credential exfiltration, and sandbox escape the primary threats to the triage infrastructure itself. A layered defense-in-depth architecture — ephemeral VMs, network isolation, egress filtering, credential separation, resource limits, and human-in-the-loop final decisions — mitigates these risks while keeping the cost per triage low.
AI triage
1 post
Agents vs. agents: how we triage HackerOne reports for $2 each, 85% as well as a human