---
title: "AI is industrialising the search for vulnerabilities. Companies need to industrialise their response — Marsanne Studio AI watch"
description: "Agentic AI is multiplying vulnerability reports, forcing companies and Bug Bounty platforms to industrialise how they handle them."
url: "https://marsanne.studio/en/ai-watch/ai-is-industrialising-the-search-for-vulnerabilities-companies-need-to-c8da13/"
lang: "en"
---

[Marsanne Studio](https://marsanne.studio/en/)

[← Back to home](https://marsanne.studio/en/ai-watch)

[← The AI watch](https://marsanne.studio/en/ai-watch)

Opinion · 12 October 2026

# AI is industrialising the search for vulnerabilities. Companies need to industrialise their response

Original title, in French: “L’IA industrialise la recherche de failles. Aux entreprises d’industrialiser leur réponse”

**Publication**

Alliancy (France)

**Author**

Guillaume Vassault-Houlière

**Published on**

12 October 2026 · read in the page structured data

## Summary

The article analyses the effect of agentic AI on vulnerability research in the context of Bug Bounty. Security researchers (hunters) now run dozens of AI agents continuously across different programmes, which multiplies the number of reports. The author notes increases of around 70% in valid reports rated "high" or "critical" when new models are released, but also an increase in noise ("AI slop") with poorly qualified reports. He concludes that Bug Bounty platforms must filter this noise before passing reports on to companies, and that companies must in turn industrialise their vulnerability management (centralisation, prioritisation, API-based automation of processing) to absorb this change of scale.

Summary based on the full text of the article.

[Read the article on Alliancy →](https://alliancy.fr/lia-industrialise-la-recherche-de-failles-aux-entreprises-dindustrialiser-leur-reponse-4b890876-76a5-4a1b-b34d-c5a12b15cf9a)

## Figures cited

-   70 %
    
    Increase in valid vulnerability reports rated "high" or "critical" during certain periods linked to the release of new AI models
    
    Bug Bounty programmes, periods not specified
    
    > « On a même observé des hausses de l’ordre de 70% des rapports valides classés « high » ou « critical » sur certaines périodes correspondant à la sortie de nouveaux modèles. »
    

## Classification

**Country**

Worldwide scope

**Company size**

All sizes

**Industries**

Software vendors, IT services companies, telecoms · All industries, or industry not specified

**Companies**

OpenAI (cited), Anthropic (cited)

**Keywords**

bug bounty, cybersecurity, vulnerabilities, agentic AI, vulnerability management, ethical hacking

Entry written by Marsanne Studio from the cited article, with the help of an AI model (claude-sonnet-5). The rights to the article and its illustrations belong to Alliancy and its author. Entry translated from French by Claude Sonnet 5.5.