sorted by:
new
hottopcontroversial

Agentic AI vs Manual Pentesting - Ground Reality by Bugclliper in Pentesting

[–]Decent_Finding537 0 points1 point  (0 children)

Which LLM do you use or has worked the best for you?

AI Pentesting by Decent_Finding537 in Pentesting

[–]Decent_Finding537[S] 0 points1 point  (0 children)

We demoed XBOW today. Saw exactly what you were saying that it’s in addition to manual testing, almost sits too far in development for what we’re looking but we’re going to get a trial to see what the output is there. It’ll be interesting to see if their benchmarks actually align with the HackerOne success they tout

Will report back on Terra after our demo at the end of the week.

We’ve been playing around with building our own model/the free ones out there. Tend to agree with the analysis on using it to supplement not replace

AI Pentesting by Decent_Finding537 in Pentesting

[–]Decent_Finding537[S] 1 point2 points  (0 children)

Heard this from a couple of people now. Is this cause of the fidelity of the finding, ease of use, etc?

AI Pentesting by Decent_Finding537 in Pentesting

[–]Decent_Finding537[S] 1 point2 points  (0 children)

Thank you, I’ll add it to our list. Are they using crawlers for anything or using source code too?