Announcing Hai Plays: Personalize Your Playbook for Spot-On Security Advice – Source:www.hackerone.com

We’re excited to introduce Hai Plays, a powerful new feature for Hai, HackerOne’s AI co-pilot. Hai Plays is designed to make your interactions with Hai more efficient and tailored to your specific security needs. 

Hai Plays creates personalized tools that help you solve repetitive tasks faster and more effectively. You can fully personalize and customize your interactions with Hai by providing custom instructions and teaching Hai your organization’s unique domain knowledge.

Take Precision to the Next Level—Beyond Basic AI

Efficiency and precision are critical in every operation. However, many security teams face the challenge of repeatedly entering the same information for every vulnerability report. Whether it’s details about your tech stack, preferred tone of voice, or other business-critical information, these repetitive tasks can slow you down and increase the risk of errors.

While a general AI tool might assist in automating some of these tasks, it lacks the tailored, security-focused capabilities that Hai Plays provides. For example, if you’re frequently working with a custom severity model like Zoom’s Vulnerability Impact Scoring System (VISS) or need to provide more in-depth remediation advice, Hai Plays allows you to store and reuse detailed, organization-specific prompts. This ensures that your AI is not just generic but highly specialized to your unique environment.

Customizable, Ready-to-Use Plays

Hai Plays offers a simple yet powerful usage improvement for existing users—a bookmarking functionality for frequently used instructions. This means you no longer have to input the same information repeatedly. 

Instead, store and retrieve your most-used prompts with a click, saving time and creating consistency across all communication and reports.

For instructions on how to set up these Plays, visit our Hai Plays Examples Product Documentation.

Hai Plays in Action

Hai Plays offers practical solutions to streamline critical tasks, from generating a clear, concise vulnerability brief tailored for C-suite executives to assessing the likelihood of uncovering specific vulnerabilities during a pentest. These solutions allow teams to focus their efforts where they matter most. 

These examples show how Hai Plays can enhance efficiency and decision-making across both technical and leadership teams.

Hai Play Example: Executive Vulnerability Briefing

Present vulnerability information through an executive lens, focusing on business risks, implications, and potential impact scenarios. It empowers leadership teams to prioritize cybersecurity effectively and make informed decisions about resource allocation and risk mitigation strategies.

This custom prompt provides a structured, leadership-friendly overview of security vulnerabilities tailored for executive audiences like CISOs, Execs, and Board members. 

Its purpose is to effectively communicate the key details and implications of identified vulnerabilities in a concise yet impactful manner.

The output balances simplicity and context, using bullet points for concise information and detailed descriptions where more explanation is needed.

Check out how to set up an executive vulnerability briefing.

Hai Play Example: Vulnerability Discovery Optimizer

The vulnerability discovery optimizer aims to assess if a reported vulnerability is likely caught during penetration testing following standard methodologies like OWASP Top 10, MITRE CWE, and asset-specific test cases. 

By systematically analyzing reported vulnerabilities against the testing methodologies and frameworks followed by HackerOne’s penetration testing teams, organizations can reinforce the value of utilizing Penetration Testing as a Service (PTaaS) and bug bounty as a combined solution:

• Find gaps in testing for high-severity vulnerabilities discovered through bug bounties, and improve future PTaaS engagements.
• Focus on fixing critical issues missed during a pentest but were caught by your bug bounty program.
• Save money by making sure PTaaS testing is thorough from the start, reducing the need to rely on bug bounty payouts for issues that should have been found.

Use this analysis to get the most out of HackerOne’s PTaaS and bug bounty programs for stronger application security.

Check out how to set up a vulnerability discovery optimizer.

Supercharge Your Workflow with Customizable Hai Plays

Hai Plays represents a significant step forward in how you interact with Hai. By allowing you to store and customize preferences, Hai Plays ensures that your interactions are faster and more aligned with your specific needs and objectives. 

Whether you streamline your workflow, enhance your vulnerability reports, or simply save time on repetitive tasks, Hai Plays offers a powerful and easy-to-use solution.

Learn more about Hai.