PentesterLab

AI as a research partner, not a replacement.

This is probably the most interesting look I have seen at what AI-...

Security Assertion Markup Language (SAML) is a widely deployed standard for Single Sign-On (SSO) in the enterprise, and a recurring source of critical authentication vulnerabilities. If you have ever logged into Salesforce, Workday, an internal admin panel, or a third-party SaaS using your corporate identity, there is a good chance SAML was involved behind the scenes. It is t...

Reward hacking, shrinking harnesses, LLM-first SAST and agents that cheat.

Every few weeks, another startup announces an AI pentester. Looking at the market, it feels as though the future of AI pentesting will come from a well-funded startup with access to the best models, researchers and compute.

That view overlooks pentesting boutiques. Talking with customers, I keep hearing the same thing: many are building their own AI pentesters,...

The agents are playing Prison Break this week. We also have two very cool exploit chains and a question I keep coming back to: is AI going to make exploit chains more complex?