HackerOne Report Surfaces Massive Increase in Vulnerability Backlogs
DevOps.com, Wednesday, October 7th, 2026
HackerOne finds fix times fell from 135 to 62 days, yet unresolved validated vulnerabilities grew 131% as AI speeds discovery.
A HackerOne analysis finds the rate of resolving vulnerabilities rose 54% in the past year and average resolution time fell from 135 to 62 days.
Yet known, validated but unresolved issues grew 131% over two years, and 70% of 111 surveyed security leaders say findings are added to backlogs faster than they are fixed.
CEO Kara Sprague says AI-assisted research is overwhelming DevSecOps teams, which now need AI-driven remediation and formal vulnerability operations (VulnOps) practices to manage exposure debt.