Assail Inc. launches Sidewinder, an autonomous security platform

Assail Inc. has launched Sidewinder, a rebuilt version of its Ares offensive security platform. This new iteration features a 31 billion-parameter model designed to audit its own findings and correct its mistakes without human intervention, with further coverage provided by Silicon Angle.

Sidewinder represents a significant redesign of Assail's Ares platform, moving from a script-following scanner to a system that plans its own security engagements. It utilizes a chat-first, plan-driven approach with 12 specialized autonomous agents that interact with a persistent knowledge graph of a target's attack surface. The platform employs vision-grounded analysis to operate a real browser, enabling it to crawl single-page applications, bypass simple challenges, and manage multiple authenticated identities simultaneously. This allows for the detection of cross-account, broken object-level authorization, and broken function-level authorization flaws.

Each finding is independently verified, deduplicated, and presented with the agent's reasoning and a live network trace, mapped to the MITRE ATT&CK framework. Customers can deploy Ares on AWS, Azure, Google Cloud, or on-premises. Assail argues that Sidewinder addresses the limitations of traditional penetration testing by providing continuous, autonomous offensive security, reducing false positives and addressing vulnerabilities in real-time.

Source: Silicon Angle