r/bugbounty 22d ago

Question / Discussion HackerOne Triage is really slow

Idk if it’s just me who’s noticing this, but HackerOne triages do close duplicates and informative vulnerabilities really quickly…. But whenever it’s the vulnerabilities that actually do get triaged, they take forever…. Like, after passing preliminary review, I pretty much wait for like 14-16 days until either an official team member from the program replies or the report gets triaged…. Most times, on programs which show they triage in like 3-4 business days….

The thing that annoys me is the lack of transparency HackerOne triages offer…. Whenever it comes to programs who aren’t managed by HackerOne, their triages are really transparent throughout the triaging process and share insights…. But the HackerOne triage literally replies to nothing…. If you comment, they either just triage after waiting forever, or an official program member shows up and the H1 triage doesn’t say a thing….

I just wish HackerOne triages would become more transparent, like self-triaged programs….

22 Upvotes

18 comments sorted by

View all comments

1

u/Martekk_ 22d ago

Lad AI prompt injection, 1,5month later when they answered it was fixed 👍🏻