HackerOne's decline as a cautionary tale about mission drift
A long-form post on 'What Happened to HackerOne' is getting traction, with the HN thread focused on two things: a co-founder's response that commenters identified as AI-generated slop ('it's like he prompted for corporate damage control'), and a sardonic comment that the company 'got the executives it paid for.' The implication is that HackerOne traded its hacker-community credibility for enterprise revenue and ended up losing both.
The pattern: a company that built its brand on trust with a specific technical community (security researchers) hired away from that community and toward enterprise sales, and the community noticed and left. The AI-generated response is being treated as the final indignity, a company that once stood for authentic human expertise using AI to simulate caring.
This is not a new story structurally, but the speed and visibility of the backlash is a signal about how much the AI-slop-as-PR move has become a credibility killer.
So what?
Using AI to draft public crisis responses when your audience is technically sophisticated is a trap. They will detect it, it will confirm their worst suspicions about your values, and the story will become about the response rather than the original problem. If you lead a community-facing company, this is a specific mistake to put on your 'never do' list.