HackerOne Security Virtual Summit

The Impact of AI on Security

A two-hour virtual experience for security leaders working through what AI has actually changed about their programs.

July 15, 2026 | 11:00 a.m. to 1:00 p.m. ET
July 16, 2026 | 11:00 a.m. to 1:00 p.m. BST

The gap between discovery and exploitation has collapsed.

Time-to-exploit is compressing toward hours. Submission volumes at enterprise programs are up triple digits this year. Engineering teams have started discounting the queue because the signal is no longer clean enough to act on.

Discovery is not the constraint anymore. Exposure time is. The find-to-fix loop, the path from a vulnerability surfacing to a confirmed fix in production, is where modern security programs are quietly breaking down.

The HackerOne Security Summit is built for the leaders inside that conversation. CISOs, VPs of Security, AppSec and VM leaders working through the operational mismatch between AI-speed discovery and human-paced response. Two hours, eight sessions, and an unscripted look at what is working at scale.

What you'll hear

Where the find-to-fix loop is breaking, and what that breakdown costs once engineering loses trust in the queue
How researchers are actually using AI inside their toolkit today, and what defenders should learn from offense
What continuous validation looks like at enterprise volume, with the metrics that matter
How a peer security leader operationalized AI inside their program without burning the relationship between security and engineering
The platform data behind the volume shift, including signal rates, severity distribution, and what backlog growth is hiding

Go to Sessions

Who should attend

CISOs and VPs of Security working through AI-driven submission volume
Vulnerability Management leaders watching SLAs slip and backlogs grow
AppSec leads getting pushback from engineering on the queue
Security operations and program leaders evaluating continuous validation at scale

Agenda

HackerOne Security Virtual Summit

July 15, 2026 | 11:00 a.m. – 1:00 p.m. ET July 16, 2026 | 11:00 a.m. – 1:00 p.m. BST

Session 1

Security Is Not Where You Think It Is

Nidhi Aggarwal, Chief Product Officer, HackerOne

A direct opening on what has actually changed in security over the last six months. Submission volumes are surging, engineering teams are tuning out the queue, and time-to-exploit is collapsing. Discovery is no longer the constraint — exposure time is.

5 min

Session 2

Has AI Broken the Security Model?

Omar Santos, CoSAI Board Co-Chair, Cisco

AI agents now act, decide, and spawn further agents at machine speed across identity boundaries built for humans. This keynote covers what every security leader should plan for: agentic identity, MCP security, AI-generated code risk, and where the human-paced security model is breaking down.

15 min

Session 3

The Exposure Debt: Your Backlog is Your Quantifiable Risk

Alex Rice, Co-Founder and CTO, HackerOne

HackerOne platform data reveals where enterprise programs are structurally breaking: submission growth, signal degradation, and backlog dynamics. Alex Rice shows what the queue has become as an exposure surface, and what programs holding the line are doing differently.

15 min

Session 4

The Researcher's AI Stack and Tradecraft

Michiel Prins, Co-Founder, HackerOne · Tom Anthony and Douglas Day, HackerOne Researchers

Top researchers share how they're actually using frontier AI models in their offensive toolkit today — what works, what's hype, and where adversarial intuition still matters most. A practical answer to whether AI can really break into your company.

15 min

Session 5

Defending AI Workloads at Cloud Scale

CJ Sturgess, AWS

A fireside conversation on what defending AI workloads at cloud scale actually requires — patterns AWS sees across customer environments, and how shared responsibility shifts when the workload itself is non-deterministic. Part of the HackerOne and AWS strategic alliance.

15 min

Session 6

The AI Security Gap: From Coverage to Confidence

Austin Schlessinger, HackerOne

89% of organizations reported an AI-related attack or vulnerability in the past year. This session explores the AI Security Gap and how security leaders can improve visibility, expand coverage across the AI lifecycle, and prioritize exploitable risk.

15 min

Session 7

What Changed, What Held: A Security Leader's Year in AI

Alex 'Jay' Balan, CISO, Super Technologies · Connie Lewis, HackerOne (Moderator)

A candid fireside with Jay Balan, CISO from Super on operationalizing AI inside a real security program — what's on the priority list, what's paused, how they rebuilt engineering trust, and how they make budget decisions in a program changing faster than annual planning allows.

15 min

Session 8

Closing the Loop: Verified Findings, Confirmed Resolutions

Josh Linder, Team Lead Partner Engineering, Armis

Discovery is no longer the constraint — remediation is. This session addresses the three failure modes causing most exposure: ownership routing errors, context loss between security and engineering, and verification gaps that close tickets without confirming the fix actually holds.

15 min

Session 9 · Closing

What Today Demands of Tomorrow's Security

Kara Sprague, CEO, HackerOne

Vulnerability exploitation has overtaken phishing as the leading initial access method. Kara Sprague closes the summit by naming the three decisions that separate the programs getting ahead from those that will spend the next 12 months reacting.

10 min

Speakers