For those who have trialed an AI pentest solution: what was the single biggest gap you encountered?

822 views1 Upvote2 Comments

Sort by:

Chief Information Technology Officer in IT Services11 days ago

From my experience, the biggest gap with AI-driven pentest tools is depth of context. They’re good at scanning broad attack surfaces quickly, but they often miss nuanced issues—like business logic flaws, privilege escalation paths, or chained exploits across systems. Without human creativity to connect the dots, results risk being shallow. The question is how to best blend AI speed with human expertise for meaningful coverage.

CISO in Software12 days ago

Sometimes, they need more environmental context to target the right APIs and instances.

Content you might like

We are in a world obsessed with the latest technologies, where it seems everything even working should be updated or upgraded to avoid the "imposed" in my opinion "digital obsolescence myth". How inclined are you towards innovation and change when the existing systems are certainly working effectively?

Very inclined: I believe in constantly pushing for innovation and improvement, even if the current systems are effective46%

Moderately inclined: I'm open to innovation and change, but only if it clearly enhances or adds value to the existing systems48%

Not inclined: If the current systems are working effectively, I prefer to maintain stability and avoid unnecessary changes5%

View Results

Are you rolling out new products or programs to help consumers/businesses navigate current economic challenges?

Yes, we already have54%

Yes, we plan to39%

No, we do not plan to roll out any new products or programs6%

View Results

Which key pentesting capability do current AI-driven vendor solutions most fail to cover?

Why do you think there are so few mature AI-driven autonomous pentesting solutions on the market, and why does this topic seem to generate more hype than in-depth technical discussion?

Can you share any tips for new security leaders to identify blind spots in their organization? How have you approached this when starting a new role in the past?