Ethical Hackers are Ramping Up AI Adoption and Collaboration
The internet is filled with daily reports about threat actors leveraging AI to enhance the speed, scale, frequency, and capabilities of their attacks, often outpacing the security measures of enterprises.
In this ongoing cybersecurity AI arms race, security teams and Managed Security Service Providers (MSSPs) are also incorporating AI technology into their defenses. One group leading this charge is ethical hackers, who utilize AI to enhance their efforts in identifying vulnerabilities within networks and systems.
The Surge in AI Adoption Among Ethical Hackers
A recent report by Bugcrowd indicates that AI adoption among “white hat” hackers—security researchers and penetration testers—is accelerating. In 2025, 82% of over 2,000 surveyed individuals reported using generative AI tools in their workflows, a significant increase from 64% in 2023 and 77% in 2024.
The motivations behind this adoption are varied, primarily revolving around speed, automation, code analysis, and as a technical assistant when encountering unfamiliar technology. According to Bugcrowd’s ninth annual Mind of a Hacker survey, hackers use AI to scale their operations, generating reconnaissance tools, automating workflows, and creating custom scripts in mere seconds instead of hours.
A Proven Technology for Hackers
According to the survey, 74% of hackers affirm that AI has already proven its value, a notable increase from just 23% in 2023. Bugcrowd executives noted that the expanding use of AI allows hackers to automate their searches for “low hanging fruit” security flaws, enabling them to focus more on complex vulnerabilities that pose significant risks to organizations.
Ram Varadarajan, CEO at security firm Acalvio, emphasized that in 2026, security teams can no longer depend solely on human efforts. The model must evolve to allow humans to direct AI-driven workflows, mirroring the strategies employed by hackers. He predicts an ongoing “bot-on-bot” confrontation.
The Evolving Role of MSSPs
As attackers increasingly utilize AI to unveil numerous vulnerabilities, MSSPs and other managed service firms must adapt. Their roles are shifting from basic monitoring to managing AI security agents capable of real-time detection and response.
Varadarajan explained that as attackers leverage AI to uncover vast numbers of flaws, especially in AI-generated code, providers will become essential in helping customers manage a more expansive and perilous attack surface. Bugcrowd CEO Dave Gerry highlighted that cybercriminals are leveraging AI to speed up their attacks, underscoring the necessity for security teams to enhance their AI capabilities in response.
The Immense Opportunity for MSSPs
Gerry also pointed out that the rise of AI adoption among malicious actors presents a significant opportunity for MSSPs to differentiate themselves in the market. They can utilize AI not only for internal efficiency but also to provide enhanced defense mechanisms for their clients, enabling them to keep pace with attackers and remain competitive in an AI-driven threat landscape.
The Value of Collaboration
Alongside the increased use of AI, ethical hackers are adopting collaborative strategies akin to those employed by threat groups, particularly ransomware gangs. The report notes that state-sponsored attackers often operate in specialized units, with various groups contributing distinct expertise.
Approximately 40% of hackers surveyed reported working as part of a team, while another 44% expressed a desire to collaborate but had yet to find suitable partners. Additionally, 44% indicated that they earn more through collaboration.
Teamwork in Defensive Strategies
The report concludes that no single individual can continuously learn all necessary skills rapidly. With the technology stack becoming increasingly complex, mastery across all areas has become nearly impossible. Collaboration enables teams to stay ahead of the curve, providing coverage that an individual cannot achieve.
Statistics reflect this sentiment: 72% of hackers reported better results when working in teams, 80% noted that teams achieve faster results, and 60% acknowledged that teams discover more critical vulnerabilities.
