Cobalt Launches Autonomous Pentest
Pentesting as a Service pioneer Cobalt has announced Autonomous Pentest, integrated in the Cobalt Offensive Security Platform to deliver pentests with findings in 24 hours..
Traditional pentesting would take place monthly or even quarterly, but that no longer keeps pace with how quickly software is being shipped today. Cobalt Autonomous Pentest offers “a more scalable approach to identifying and validatin g exploitable risk,” the company said in its announcement.
The new solution, with human expertise at its center, delivers scale through the core capabilities of expert direction, a model-agnostic AI agent, and offering those next-day findings.
Autonomous Pentest leverages the experience of about 500 vetted pentesters via the Cobalt Core community, who review the execution plan, manage the scope, and bring adversary reasoning that the company saide pure AI tools cannot provide.
The AI engine, informed by years of exploit data and more than 10,000 critical and high-severity findings, does chain prediction, prioritization and adaptive sequencing, and adapts as the frontier evolves and threat techniques morph.
“Meeting the demands of today’s development cycles requires more than automating traditional pentesting,” said Sonali Shah, CEO, Cobalt. “It requires rethinking how offensive security is delivered. Only Cobalt unifies the four critical elements of modern offensive security: elite human expertise, a context-aware platform, AI-powered orchestration, and the industry’s largest dataset of real-world pentest results. Together, these capabilities enable security teams to continuously identify, prioritize, and remediate exploitable risk at the speed of modern software development.”
Is Cobalt Autonomous Pentest a replacement for compliance-driven human-led pentests?
No. According to Cobalt, Autonomous Pentest is designed to complement, not replace, human-led pentesting for compliance-driven engagements. The intent is to extend continuous coverage across an organization’s attack surface while reserving comprehensive human-led tests for assets that require regulatory depth.
What is Pentesting as a Service (PTaaS) and how does Cobalt’s platform fit that model?
Pentesting as a Service (PTaaS) is an on-demand model that delivers penetration testing through a cloud platform, combining automated tooling with human expertise, rather than purely project-based engagements. Cobalt’s Offensive Security Platform is positioned as a PTaaS offering that now extends into autonomous, AI-orchestrated testing with its new Autonomous Pentest capability.
What data does Cobalt’s AI engine use to power autonomous pentesting?
The AI engine draws on 14 years of exploit data and more than 10,000 critical and high-severity findings accumulated through Cobalt’s Pentesting as a Service history. This dataset informs attack chain prediction and adaptive sequencing as threat techniques evolve.
The post Cobalt Launches Autonomous Pentest appeared first on SD Times.
Tech Developers
No comments