HackerOne rolls out industry framework to support \u2018good faith\u2019 AI research | CyberScoop<\/title> <meta name=\"description\" content=\"The voluntary framework would provide legal clarity to third-party AI researchers, including those who study safety and other \u201cunexpected\u201d AI behaviors\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/hackerone-industry-framework-good-faith-ai-research\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"HackerOne rolls out industry framework to support \u2018good faith\u2019 AI research\"> <meta property=\"og:description\" content=\"The voluntary framework would provide legal clarity to third-party AI researchers, including those who study safety and other \u201cunexpected\u201d AI behaviors\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/hackerone-industry-framework-good-faith-ai-research\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cyberscoop\/\"> <meta property=\"article:published_time\" content=\"2026-01-20T20:59:19+00:00\"> <meta property=\"article:modified_time\" content=\"2026-01-20T20:59:20+00:00\"> <meta name=\"author\" content=\"djohnson\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg\"> <meta name=\"twitter:creator\" content=\"@CyberScoopNews\"> <meta name=\"twitter:site\" content=\"@CyberScoopNews\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1765909325g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1767719924g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1767808656g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=13897d660a0ac2c9c7d1\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/87483\"><meta name=\"generator\" content=\"WordPress 6.8.3\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=87483\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fhackerone-industry-framework-good-faith-ai-research%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fhackerone-industry-framework-good-faith-ai-research%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"wp-singular post-template-default single single-post postid-87483 single-format-standard wp-theme-scoopnewsgroup wp-child-theme-cyberscoop\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/hackerone-industry-framework-good-faith-ai-research\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"26.209756097561\">\n<div class=\"single-article__header-content\" readability=\"35.447552447552\">\n<p> The voluntary framework would provide legal clarity to third-party AI researchers, including those who study safety and other \u201cunexpected\u201d AI behaviors. <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/87483\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"426\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research.jpg?resize=640%2C426&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg 6240w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=2048,1365 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-2.jpg?resize=1265,843 1265w\" sizes=\"(max-width: 1013px) 100vw, 1013px\"><figcaption> OpenAI and Anthropic said they turned over their models to government researchers, who found an array of previously undiscovered vulnerabilities and attack techniques. (Image via Getty) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"44.427425515661\"><body readability=\"89.586692258477\"><\/p>\n<p>Four years ago, the Department of Justice announced it would <a href=\"https:\/\/www.scworld.com\/analysis\/doj-wont-prosecute-good-faith-security-researchers\">no longer seek criminal charges<\/a> against independent and third-party security researchers for \u201cgood faith\u201d security research under the Computer Fraud and Abuse Act.<\/p>\n<p>Now, a prominent bug bounty platform is attempting to build a framework for industry to offer similar protections to researchers who study flaws in AI systems, including fields like AI safety and others that look at unintended behaviors and outputs that can impact security outcomes.<\/p>\n<p>Ilona Cohen, chief legal and policy officer at HackerOne, told CyberScoop the <a href=\"https:\/\/docs.hackerone.com\/en\/articles\/13376522-ai-research-safe-harbor-statement\">Good Faith AI Research Safe Harbor<\/a> is meant to build off previous efforts \u2014 like the DOJ policy change and the company\u2019s own Gold Standard Safe Harbor framework \u2014 that provide wider legal freedom for third-party security researchers to prod and test commercial products and systems for flaws and expand them to the AI realm.<\/p>\n<p>HackerOne previously <a href=\"https:\/\/www.hackerone.com\/sites\/default\/files\/2025-02\/HackerOne-Letter-to-DOJ-re-AI-Testing.pdf\">pushed<\/a> the DOJ to provide further guidance on how its good faith researcher policy would apply to AI systems. Cohen said the department\u2019s language \u201cprovides a lot of clarity and helped security researchers have the comfort to be able to do the testing that\u2019s so important to the backbone of our security industry, [but] it doesn\u2019t necessarily apply to all AI research.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>The DOJ\u2019s policy change in 2022 represented a hard-fought victory following years of advocacy by the cybersecurity community. Without further guidance from DOJ, Cohen said it was important for industry to do the same foundational work around advocacy and governance for AI testing that helped good faith hackers convince the agency that independent researchers are an asset to the broader cybersecurity ecosystem.<\/p>\n<p>Participating companies can attach a \u201cbanner\u201d to their HackerOne profile advertising their adoption of the protections, which commit them to, among other things, \u201crefraining from legal action \u2026 and supporting researchers if third parties pursue claims related to authorized research.\u201d<\/p>\n<p>Even as the Trump administration <a href=\"https:\/\/cyberscoop.com\/ai-safety-jd-vance-paris-ai-summit-deregulation\/\">signals<\/a> little interest in safety or security issues around AI systems, other policymakers <a href=\"https:\/\/cyberscoop.com\/mark-kelly-ai-safety-guardrails-center-for-american-progress\/\">have said<\/a> strong protections and guardrails should be one of the key differentiators when convincing other countries to adopt U.S.-made AI systems and models over authoritarian competitors like China. Cohen said it was especially critical to open testing of AI systems when they\u2019re being broadly adopted across society.<\/p>\n<p>\u201cSince AI systems are essentially deploying a lot faster than any of the governance or legal frameworks can keep up, that creates some risk \u2026 for all of us when people are reluctant to do testing of AI systems,\u201d Cohen said.<\/p>\n<p>Frontier AI companies like OpenAI and Anthropic have generally kept a tighter grip on their own security research programs.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>OpenAI, for instance, runs <a href=\"https:\/\/openai.com\/index\/red-teaming-network\/\">its own network<\/a> of third-party red team researchers, vetting and selecting them through an application process. According to the company\u2019s website, red-team engagements are commissioned by OpenAI and can be steered to different researchers at the company\u2019s discretion, with participation from some members as little as five-to-10 hours per year. Researchers <a href=\"https:\/\/openai.com\/form\/researcher-access-program\/\">can also apply<\/a> under a separate program that focuses on issues like AI safety and misuse.<\/p>\n<p>Anthropic\u2019s responsible disclosure policy <a href=\"https:\/\/www.anthropic.com\/responsible-disclosure-policy\">defines<\/a> \u201cgood faith\u201d third-party security research as testing information systems \u201cfor the sole purpose\u201d of identifying a reportable vulnerability. As such, researchers are expected to only take actions that are \u201cminimally required to reasonably prove that such potential vulnerability exists\u201d and avoid actual harmful actions, such as exfiltrating or deleting data.<\/p>\n<p>It also requires the researcher to \u201cavoid disclosing the existence of or any details relating to the discovered vulnerability to a third party or to the public\u201d without \u201cnotice\u201d from the company.<\/p>\n<p>\u201cWe fully support researchers\u2019 right to publicly disclose vulnerabilities they discover,\u201d the terms state. \u201cWe ask only to coordinate on the timing of such disclosures to prevent potential harm to our services, customers and other parties.\u201d<\/p>\n<p>Anthropic\u2019s terms also seek to broadly indemnify them from any negative outcomes related to the use or integration of their products, using all caps to emphasize that it will \u201cEXPRESSLY DISCLAIM\u201d all warranties of fitness their products may have in areas like \u201cACCURACY, AVAILABILITY, RELIABILLITY, SECURITY, PRIVACY, COMPATABILITY [and] NON-INFRINGEMENT.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>OpenAI and Anthropic did not respond to a request for comment by the time of publication.<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.5897435897436\">\n<div class=\"author-card\" readability=\"13\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/01\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research-1.jpg?w=640&ssl=1\" alt=\"Derek B. Johnson\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Derek B. Johnson<\/h4>\n<p> Derek B. Johnson is a reporter at CyberScoop, where his beat includes cybersecurity, elections and the federal government. Prior to that, he has provided award-winning coverage of cybersecurity news across the public and private sectors for various publications since 2017. Derek has a bachelor\u2019s degree in print journalism from Hofstra University in New York and a master\u2019s degree in public policy from George Mason University in Virginia. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/hackerone-industry-framework-good-faith-ai-research\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>HackerOne rolls out industry framework to support \u2018good faith\u2019 AI<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[235,78,1930,3117,439,256,1,703],"tags":[236,86,1940,3118,443,262,325,705],"class_list":["post-8275","post","type-post","status-publish","format-standard","hentry","category-ai","category-cybersecurity","category-department-of-justice","category-hackerone","category-policy","category-research","category-uncategorized","category-vulnerability-disclosure","tag-ai","tag-cybersecurity","tag-department-of-justice","tag-hackerone","tag-policy","tag-research","tag-uncategorized","tag-vulnerability-disclosure"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/ai\/\" rel=\"category tag\">AI<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity\/\" rel=\"category tag\">Cybersecurity<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/department-of-justice\/\" rel=\"category tag\">Department of Justice<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/hackerone\/\" rel=\"category tag\">HackerOne<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/policy\/\" rel=\"category tag\">Policy<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/research\/\" rel=\"category tag\">Research<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/uncategorized\/\" rel=\"category tag\">Uncategorized<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/vulnerability-disclosure\/\" rel=\"category tag\">vulnerability disclosure<\/a>","tag_info":"vulnerability disclosure","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8275","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=8275"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8275\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=8275"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=8275"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=8275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":8275,"date":"2026-01-20T14:59:19","date_gmt":"2026-01-20T20:59:19","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=87483"},"modified":"2026-01-20T14:59:19","modified_gmt":"2026-01-20T20:59:19","slug":"hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2026\/01\/20\/hackerone-rolls-out-industry-framework-to-support-good-faith-ai-research\/","title":{"rendered":"HackerOne rolls out industry framework to support \u2018good faith\u2019 AI research"},"content":{"rendered":"