Research

Lab research on AI-assisted penetration testing: what the lab's AI testing agents found in deliberately vulnerable apps, what it got wrong, and the evidence for each.

We test our own AI agents in public. Each lab study runs the lab's AI testing agents against a deliberately vulnerable open-source application in an isolated lab, and reports what it confirmed, what it claimed and could not prove, and how long it took. Studies list the application version and setup so anyone can rerun them.

Case studies from authorized tests of real systems appear only with the system owner's written permission, and are labeled as case studies.

The first lab study is in progress. It will be listed here with its data and code.

Run it on your application

Start with a scoped pilot. Our AI agents run the tests, the lab checks each finding, and you get a report with evidence.