HackerOne Addeo John VP Global Partnerships

"AI is accelerating vulnerability discovery far faster than organizations can remediate it, creating a growing “exposure debt” across the industry. What we see in the HackerOne platform data is that organizations are actually getting significantly faster at fixing vulnerabilities: mean time to remediate (MTTR) across the platform dropped by about 80%. But at the same time, vulnerability submissions increased 76% and unresolved critical vulnerabilities grew 25x, showing that even dramatic improvements in remediation speed are not enough to keep pace with the explosion of real, exploitable findings.

The challenge is no longer whether teams can fix vulnerabilities faster. It’s that years of underinvesting in remediation capacity created backlogs that are now colliding with AI-driven discovery at machine scale. Security teams were built for a world where critical findings arrived occasionally, not continuously, and the result is that exposure debt continues to rise even as organizations improve operational efficiency.

“the advantage goes to whoever reduces exposure fastest, not whoever finds the most.”
"