Ai has made me a better bug hunter. I point an LLM at an application I like to use and give it a prompt like please scan this codebase URL for bugs.

If it comes back with any, I then try to confirm them for myself to make sure it's not hallucinating any, and if that bug actually does exist, then I can report it.

I found one critical vulnerability and several high severity issues in an app that I enjoy using and reported them to the developer and got them fixed.