Opinion ·
AI is industrialising the search for vulnerabilities. Companies need to industrialise their response
Original title, in French: “L’IA industrialise la recherche de failles. Aux entreprises d’industrialiser leur réponse”
- Publication
- Alliancy (France)
- Author
- Guillaume Vassault-Houlière
- Published on
- 12 October 2026 · read in the page structured data
Summary
The article analyses the effect of agentic AI on vulnerability research in the context of Bug Bounty. Security researchers (hunters) now run dozens of AI agents continuously across different programmes, which multiplies the number of reports. The author notes increases of around 70% in valid reports rated "high" or "critical" when new models are released, but also an increase in noise ("AI slop") with poorly qualified reports. He concludes that Bug Bounty platforms must filter this noise before passing reports on to companies, and that companies must in turn industrialise their vulnerability management (centralisation, prioritisation, API-based automation of processing) to absorb this change of scale.
Summary based on the full text of the article.
Read the article on Alliancy →Figures cited
-
70 %
Increase in valid vulnerability reports rated "high" or "critical" during certain periods linked to the release of new AI models
Bug Bounty programmes, periods not specified
« On a même observé des hausses de l’ordre de 70% des rapports valides classés « high » ou « critical » sur certaines périodes correspondant à la sortie de nouveaux modèles. »
Classification
- Country
- Worldwide scope
- Company size
- All sizes
- Industries
- Software vendors, IT services companies, telecoms · All industries, or industry not specified
- Companies
- OpenAI (cited), Anthropic (cited)
- Keywords
- bug bounty, cybersecurity, vulnerabilities, agentic AI, vulnerability management, ethical hacking
Entry written by Marsanne Studio from the cited article, with the help of an AI model (claude-sonnet-5). The rights to the article and its illustrations belong to Alliancy and its author. Entry translated from French by Claude Sonnet 5.5.