INSIDE AN AI-RUN BUG BOUNTY REPORT

Summary from the TLDR InfoSec newsletter

Anshuman Bhartiya details his setup and experience with a largely AI-driven bug bounty workflow. Bhartiya uses a custom-built harness that uses the pi coding-agent harness to monitor source code changes and route security-relevant diffs through 18 deterministic, vulnerability-specific detectors. The report was then generated and submitted by Claude, with the researcher only reviewing and guiding the agent.