Skip to content

How AI Pentesting Works

AI Pentesting combines crawling capabilities with agents to discover vulnerabilities through injection testing and business logic analysis.

Crawling

AI Pentesting uses agentic crawling to explore applications:

  • State-aware exploration
  • Natural language instructions
  • Error recovery
  • Context understanding

Agents use LLM reasoning to navigate web applications and discover endpoints.

XSS Testing

Agents discover XSS vulnerabilities through:

  • Context-aware injection
  • Multi-step exploitation
  • Response analysis
  • Payload adaptation
  • State tracking

Agents reason about DOM structure, JavaScript execution contexts, and input validation to craft XSS payloads.

Business Logic Testing

Agents discover business logic vulnerabilities including:

  • Authorization testing: BOLA, tenant isolation, and privilege escalation (see BOLA Agent)
  • Workflow bypasses
  • State manipulation
  • Multi-step attacks

Agents use multi-user authentication to test authorization boundaries (see BOLA Agent for configuration).

Agent Workflow

  1. Discovery: Agents explore the application using powerful crawling
  2. Analysis: Agents reason about application structure and behavior
  3. Testing: Agents execute injection attacks and business logic tests
  4. Validation: Agents verify vulnerabilities and collect evidence

Agent reasoning is visible in scan logs, showing why agents took specific actions and how they adapted their strategies.