HackerOne is expanding its H1 Platform with access to OpenAI’s frontier GPT cyber models, adding new AI capabilities to products focused on code security and remediation.
The integration will be available in H1 Code Security Audit, H1 Code and H1 Remediation. Use of the models is optional and can be enabled by customers.
As AI becomes more capable of identifying vulnerabilities and complex attack paths, security teams are being pushed to move faster across the rest of the vulnerability management process. Finding more issues is only part of the challenge. Teams also need to validate findings, understand which exposures present the most risk and determine how to remediate them efficiently.
“AI is making complex attack paths increasingly discoverable, changing the risk calculation for every security leader,” said Kara Sprague, Chief Executive Officer at HackerOne. “Defenders have to assume that if an exposure exists, it will be found, and act before attackers do. That means building security programs that continuously discover, validate, and eliminate risk, so organizations can move from reacting to threats to staying ahead of them.”
HackerOne, a global leader in Continuous Threat Exposure Management, said its multi-model H1 Platform can use OpenAI’s cyber models through the Daybreak Defense Network. The technology is intended to broaden coverage, validate outputs and trace security findings back to their root cause.
Those findings can then be paired with developer-ready fix plans to help teams move from discovery to remediation more quickly.
“Frontier AI can significantly expand what defenders can discover, but findings must still be validated, prioritized, and translated into action,” said Nidhi Aggarwal, Chief Product Officer at HackerOne. “The H1 Platform can put frontier AI to work across the security lifecycle, finding and validating the exposures that pose real risk, tracing them to root cause, and giving teams a clear path to remediation.”
The OpenAI integration is one part of HackerOne’s broader security model. The company also relies on its community of security researchers to identify issues that may require human judgment, including complex attack chains, business logic flaws and novel exploitation paths.
The partnership extends HackerOne and OpenAI’s existing work around cyber defense, including efforts to improve access to defensive security capabilities and accelerate vulnerability remediation.
