We get asked if AI pentesting is safe to run more than we get asked if it works

Fair question, and no pentest has ever been risk-free, human or otherwise.

You can't make a non-deterministic machine deterministically safe, and the same has always been true of people. Testers lack sleep, run on too much or too little caffeine, and make mistakes. So the advice hasn't changed: avoid testing in production, keep validated backups, and make sure disaster recovery actually works before you need to find out.

Andy Hornegold, our Chief Security Technologist, wrote the full breakdown of how these tests actually run:

• Why nothing gets reported until the agent has run the exploit against the app, with proof-of-concept code so you can reproduce it
• Why the agent gets your source code rather than testing blind
• What they cost against consultant day rates, and the honest trade-offs

Worth a read if the idea makes you slightly nervous: AI web app pentesting: everything you need to know