$19.5k in bug bounties so far this quarter from HackerOne and Apple Security Bounty, using my agentic workflows.
The best part: on some vectors, every model told me exploitation wasn't possible.
They were right. Getting meaningful impact required chaining two bugs I found manually.
My workflow:
1. Lead gen. Opus 5.5 builds custom tooling around my own hunting ideas
2. Validation. Opus 5, Daybreak Blue and DeepSeek V4.1 Flash 1017 filter the leads, so i only spend time on vectors worth it
3. Escalation. Manually reviewing every lead and testing it the old-school way using Burp and Browser :)
AI hasn't replaced us yet, it replaced the noise. Where training data and context are missing, your experience matters.
Science
Agentic workflow earns $19.5k in bug bounties in one quarter
Security researcher Nick Mykhailyshyn earned $19.5k in bug bounties this quarter by pairing agentic lead generation and validation with manual testing. Opus 5.5 built custom tooling, while Opus 5, Daybreak Blue, and DeepSeek V4.1 Flash 1017 filtered leads; the key bugs were found manually.
418likes
11reposts
285saves
17Kviews
- Role
- Security Researcher and Software Engineer
- Posted
