HackerOne has launched the H1 Platform, an agentic AI-powered platform designed to help organizations identify, validate, prioritize, and remediate security exposures through Continuous Threat Exposure Management (CTEM).
The company said the platform was developed to address growing challenges facing security teams as vulnerability discovery continues to outpace remediation efforts.
According to HackerOne, increased use of AI-powered coding tools and automated security technologies has contributed to a rise in vulnerability volumes across enterprise environments.
Data from HackerOne indicates vulnerability submissions increased 92% year over year, while critical and high-severity findings also rose. The company said remediation efforts have struggled to keep pace with the volume of newly discovered issues.
The H1 Platform uses Hai, HackerOne’s agentic AI orchestrator, to support vulnerability validation and remediation activities. The platform correlates exploitability data, remediation intelligence, and attack trends to help organizations focus on vulnerabilities that present the greatest business risk.
“In a world reshaped by frontier AI models, security can’t afford to be static, theoretical, or siloed. It must be continuous, validated, and tied to business impact,” said Nidhi Aggarwal, Chief Product Officer at HackerOne. “As exploit windows shrink and vulnerability volume accelerates, organizations need security systems that can continuously discover and validate what matters, prioritize action, and operationalize remediation at AI scale to continuously reduce cyber risk.”
According to HackerOne, the platform incorporates agentic capabilities across the CTEM process, including attack surface testing, exploitability validation, vulnerability prioritization, and remediation workflows.
The company said the platform integrates with enterprise tools such as Jira, GitHub, ServiceNow, Azure DevOps, and Linear. Additional features include agentic exploitation workflows that generate validated findings and executive reporting capabilities designed to help security leaders measure exposure reduction and remediation outcomes.
HackerOne also highlighted the role of its global community of security researchers in the platform. The company said researchers provide expertise that complements automated analysis by identifying business logic flaws, attack chains, and other complex security issues that may be difficult for automated systems to detect.
“The AI era demands a new kind of security platform: agentic, continuous, and operating at the speed of the threat. The H1 Platform closes the discovery-remediation gap that defines this moment, built on the only foundation that could make it work: the simultaneous trust of the Fortune 500 and the world’s largest community of security researchers, sustained over more than a decade,” said Kara Sprague, HackerOne’s Chief Executive Officer. “As enterprises move from securing code to securing AI itself, the researcher community’s role on this platform will only deepen.”
HackerOne said the H1 Platform currently supports approximately 1,300 organizations worldwide, including 20% of Fortune 500 companies. The company reported that its customers have collectively mitigated more than $32 billion in exposure risk and reduced mean time to remediate by approximately 80%.
One customer, KOHO Financial, reported improvements in vulnerability management and triage efficiency after using the platform.
“We went from a set-and-forget security program to one that actually keeps pace with how fast threats move,” said Scott Brown, Security Lead, KOHO Financial. “Reducing median triage time by roughly 80% has changed everything. Our team focuses on what’s confirmed and exploitable, and vulnerabilities get addressed before they become real risk.”
