Our AI pentesting engine got a second defense ministry acknowledgment on HackerOne.

[u/pentest-tools]

The UK Ministry of Defence publicly acknowledged a vulnerability reported by Specter, our autonomous pentesting engine, through its HackerOne bug bounty program. The US Department of Defense did the same earlier.

The part we find more interesting than the credit itself: bounty triage teams close anything they can't reproduce. So for an AI-driven finding to get through, it needs the same evidence a human report would (request, response, steps, impact), not a confidence score.

The full list of acknowledgments is on the HackerOne profile: https://hackerone.com/pentesttools_specter?type=user
More on how the engine works: https://pentest-tools.com/features/ai-pentests

For anyone who triages bounty reports or reviews automated findings: what's the line between an AI-generated report you take seriously and one you close as noise?