Penetration Testing

Penetration testing is already well suited to be automated. The earliest scanners from CyberCop and ISS were pointed at a target IP address range and let run. Each of the 65,535 TCP ports would be scanned on each IP address in a range. As the payment card industry released requirements for frequent pentests, there was a flood of services offering continuous pentesting. There are 318 pentesting products from 214 vendors in the IT-Harvest Dashboard.

But pentesting encounters decision points where a human is often called in. There may be an exploitable misconfiguration or vulnerability that requires a custom exploit. This is where AI can play a role by making those decisions.

Here are the pentesting solutions that are AI-first: