Report Assistant is a Hai-powered agent that helps you write stronger vulnerability reports. It reviews your content, surfaces issues, and offers suggestions, and you decide what to apply. Nothing in your report changes unless you choose to change it.
How it Works
Report Assistant has two interfaces that work together:
Report form — Write or paste your content directly, edit any field, and apply suggestions from the agent. The form is your workspace; everything stays exactly as you write it until you change it.
Chat — Available at all times alongside the form. Use it to ask questions, request a review of a specific section, or ask the agent to make a specific change. The agent won't change anything without you asking — but when you do, it can apply updates directly using the context it has built up about your report.
Write a Report
There are two ways to start a report with Report Assistant:
From a program page — Go to the program's Security page and click Submit report. The program is already selected.
From Report Assistant — Go to hackerone.com/hai/report_assistant and click Start report. You'll be asked to select a program first.
Once you've started:
Paste your draft or start writing in the form.
Click Run checks. Report Assistant runs a set of quality checks on your content and surfaces the results in the chat panel.
Review the check results, then improve your report using any combination of the options below.
When you're ready, click Submit.
Quality Checks
After you click Start report, Report Assistant runs your content through a set of checks and returns the results in chat. Each check tells you what was found and what could be improved. The agent does not automatically make any changes to your report.
Report Assistant checks for:
Steps to reproduce — Are they clear, specific, and complete?
Expected vs. actual behavior — Is the vulnerability clearly described?
Impact — Is the potential harm explained?
Asset scope — Does the reported asset match the program's in-scope assets?
Severity — Does the estimate fit the vulnerability?
Supporting material — Are screenshots, logs, or proofs-of-concept included where useful?
Custom fields — Are any required program fields completed?
Improving Your Report
If any checks need attention, you have three ways to address them:
Edit the form directly — Update the description, add missing details, or change dropdown fields like Asset, Severity, or Weakness.
Chat with the agent — Ask Report Assistant to help. For example, "Can you improve my steps to reproduce?" or "Help me rewrite the impact section." The agent uses the context it's gathered about your report to suggest or apply changes when you ask.
Add supporting material — Upload screenshots, logs, or other evidence in the attachment area.
You can use any combination of these. The agent won't modify your report unless you ask, but when you do, it can make changes based on what it knows about your report. After making updates, Report Assistant re-runs the checks so you can see your progress before submitting.
You can also use Preview mode to see how your markdown content will appear.
Setting Asset, Weakness, and Severity
You can set the asset, weakness, and severity fields manually at any time using the dropdown menus in the form. Severity can also be calculated using the built-in CVSS calculator.
Report Assistant may suggest values based on your report content. You can accept, adjust, or ignore them. Your selection is what gets submitted, not the agent's suggestion.
Add Attachments
Screenshots, logs, and videos provide supporting evidence that strengthens your report. Upload files using the drag-and-drop area in the form. You can also paste screenshots directly into the form — they're captured as attachments, preserved throughout editing, and included in your final submission.
You can paste attachments in-line; they will show up as {F######} to indicate where the image will render.
Already Have a Draft?
Paste it directly into the form. Report Assistant reviews your content without restructuring or removing anything. Your original wording, screenshots, and technical details stay intact. Use chat to refine specific sections on your own terms.
Edit a Report
Your draft is saved as you work. You can return to it at any time at hackerone.com/hai/report_assistant.
You can edit any section directly in the form. You can also use chat to request targeted changes — for example, "Help me improve the impact section" or "Are my steps to reproduce clear?" The agent will respond with a suggestion or apply the change if you ask it to. Nothing is applied automatically.
Frequently Asked Questions
Does Report Assistant change my report?
No, not unless you ask it to. Report Assistant reviews your content and surfaces suggestions, but it won't rewrite or remove anything without your instruction. You can ask the agent to make a specific change via chat, and it will, but it won't act on its own.
Is the data in my report shared with the program before I submit?
No. Only the text you enter is used to generate suggestions. Program data is not accessed during this process.
Is Report Assistant required?
No. You can use the standard form by clicking "Looking for the old form?" on the submission page.
What if Hai is disabled for a program?
Disabling Hai at the program level does not affect Report Assistant. It remains available to you regardless.