Model, harness, gym: why Novee owns the full AI pentesting stack – Ido Geffen – BH26 #1

Most "AI security" tools are thin wrappers around a general-purpose frontier LLM — reasoning capability rented from someone else, applied to a generic scanning workflow. Novee took the opposite path. In this interview, Novee CEO and co-founder Ido Geffen breaks down what it means to own the full AI pentesting stack — the proprietary offensive reasoning model, the harness that coordinates specialized agents, and the training gym where those agents are continuously benchmarked, post-trained on real attacker tradecraft, and promoted into production.

Ido explains why owning each layer matters: it's how Novee's model consistently outperforms frontier LLMs at live browser exploitation, how the platform improves at a rate the customer feels every cycle, how Novee keeps security testing cost-efficient rather than relying on tokenized pricing models, and how new attacker techniques get injected into agent memory the moment Novee's research team observes them in the wild. He then makes the case that owning the model is only half the story. The other half is the Asset Intelligence Model — a living understanding of each customer's environment, workflows, permissions, APIs, and business logic. That's what turns a generalist AI hacker into a bespoke one: not just an attacker that reasons well, but one that reasons well about your specific business. Ido closes with what this compound advantage means for buyers: findings that get more targeted every cycle, remediation tailored to their actual stack, and a platform whose ceiling rises as attackers get faster.

This segment is sponsored by Novee Security. Visit https://securityweekly.com/noveebh to learn more about them!