AI-Native Security Testing
AI-Assisted Pen Testing vs Traditional Manual Testing Compared
AI agents handle continuous testing where annual pen tests leave months of code untested.
Malik Holt
· 10 min read
Actually Exploitable — Page 3
AI-Native Security Testing
Autonomous Vulnerability Scanners With End-to-End Exploit Path Tracing
Exploit-path tracing replaces signature matching with proof of actual exploitability.
Rosa Rahman11 min read
AI-Native Security Testing
AI Security Testing Tools That Combine Code Visibility With Data Flow Mapping
Tracing untrusted data through code reveals exploits that pattern matching misses.
Malik Holt9 min read
AI-Native Security Testing
Approaches to Tracing Taint Through Third-Party Library Boundaries
Security tools go blind at library boundaries, letting vulnerabilities slip through undetected.
Ingrid Novak11 min read
AI-Native Security Testing
Limitations of Fully Automated Penetration Testing Tools
Machines can't replace human judgment when vulnerabilities hide in real-world complexity.
Rosa Rahman12 min read
AI-Native Security Testing
SAST Tools With Cross-File Taint Analysis Capabilities
Single-file scanners miss the real vulnerabilities; cross-file analysis catches them.
Malik Holt7 min read
Security Remediation
Retesting Vulnerabilities After Remediation and What Confirms a Clean Fix
Evidence shows whether a fix actually closed the vulnerability or just hid the symptom.
Rosa Rahman9 min read
Security Remediation
Retesting Vulnerabilities After a Pen Test Fix
Confirming a fix actually worked requires testing beyond the original exploit.
Ingrid Novak8 min read
Security Remediation
Prioritizing Pen Test Findings by Exploitability in a SaaS Environment
Focus on exploitability and chaining rather than CVSS scores to prioritize pen test findings.
Rosa Rahman8 min read
Security Remediation
Prioritizing Pen Test Findings for Remediation Sprints
A triage framework that weighs exploitability and attack chain position beats raw severity scores.
Ingrid Novak10 min read
Compliance & Audit Readiness
Penetration Testing Requirements in SOC 2 Type II Audits
Auditors expect penetration tests even though SOC 2 never requires them explicitly.
Ingrid Novak12 min read
Compliance & Audit Readiness
ISO 27001 Penetration Testing Requirements and Audit Evidence
Penetration testing isn't mandatory in ISO 27001, but auditors expect it as evidence anyway.
Rosa Rahman10 min read
