Automated penetration testing

<body>Most "AI security" tools are thin wrappers around a general-purpose frontier LLM — reasoning capability rented from someone else, applied to a generic scanning workflow. Novee took the opposite path. In this interview, Novee CEO and co-founder Ido Geffen breaks down what it means to own the full AI pentesting stack — the proprietary offensive reasoning model, the harness that coordinates specialized agents, and the training gym where those agents are continuously benchmarked, post-trained on real attacker tradecraft, and promoted into production.</body>

<body>Most "AI security" tools are thin wrappers around a general-purpose frontier LLM — reasoning capability rented from someone else, applied to a generic scanning workflow. Novee took the opposite path. In this interview, Novee CEO and co-founder Ido Geffen breaks down what it means to own the full AI pentesting stack — the proprietary offensive reasoning model, the harness that coordinates specialized agents, and the training gym where those agents are continuously benchmarked, post-trained on real attacker tradecraft, and promoted into production. </body>

<body>Ido explains why owning each layer matters: it's how Novee's model consistently outperforms frontier LLMs at live browser exploitation, how the platform improves at a rate the customer feels every cycle, how Novee keeps security testing cost-efficient rather than relying on tokenized pricing models, and how new attacker techniques get injected into agent memory the moment Novee's research team observes them in the wild. He then makes the case that owning the model is only half the story. The other half is the Asset Intelligence Model — a living understanding of each customer's environment, workflows, permissions, APIs, and business logic. That's what turns a generalist AI hacker into a bespoke one: not just an attacker that reasons well, but one that reasons well about your specific business. Ido closes with what this compound advantage means for buyers: findings that get more targeted every cycle, remediation tailored to their actual stack, and a platform whose ceiling rises as attackers get faster.</body>

<body>Ido explains why owning each layer matters: it's how Novee's model consistently outperforms frontier LLMs at live browser exploitation, how the platform improves at a rate the customer feels every cycle, how Novee keeps security testing cost-efficient rather than relying on tokenized pricing models, and how new attacker techniques get injected into agent memory the moment Novee's research team observes them in the wild. He then makes the case that owning the model is only half the story. The other half is the Asset Intelligence Model — a living understanding of each customer's environment, workflows, permissions, APIs, and business logic. That's what turns a generalist AI hacker into a bespoke one: not just an attacker that reasons well, but one that reasons well about your specific business. Ido closes with what this compound advantage means for buyers: findings that get more targeted every cycle, remediation tailored to their actual stack, and a platform whose ceiling rises as attackers get faster.</body>

<body>This segment is sponsored by Novee Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/noveebh">https://securityweekly.com/noveebh</a> to learn more about them!</body>

<body>This segment is sponsored by Novee Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/noveebh">https://securityweekly.com/noveebh</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15625″} podcast from PPWorks

Application security

AI/ML

Model, harness, gym: why Novee owns the full AI pentesting stack – Ido Geffen – BH26 #1

<body>This segment discusses how AI addresses the long-standing gap between traditional pentesting and automated vulnerability scanning. Intruder CEO and founder Chris Wallis dives into the nuances of AI-enabled security and how these offerings will impact midmarket security teams.</body>

<body>This segment discusses how AI addresses the long-standing gap between traditional pentesting and automated vulnerability scanning. Intruder CEO and founder Chris Wallis dives into the nuances of AI-enabled security and how these offerings will impact midmarket security teams.</body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.intruder.io/platform/ai-pentesting">https://www.intruder.io/platform/ai-pentesting</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.intruder.io/platform/ai-pentesting">https://www.intruder.io/platform/ai-pentesting</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.intruder.io/blog/ai-pentesting-the-depth-of-a-pentest-on-demand">https://www.intruder.io/blog/ai-pentesting-the-depth-of-a-pentest-on-demand</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.intruder.io/blog/ai-pentesting-the-depth-of-a-pentest-on-demand">https://www.intruder.io/blog/ai-pentesting-the-depth-of-a-pentest-on-demand</a> </body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.intruder.io/blog/ai-web-app-pentesting-test-on-every-major-release">https://www.intruder.io/blog/ai-web-app-pentesting-test-on-every-major-release</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.intruder.io/blog/ai-web-app-pentesting-test-on-every-major-release">https://www.intruder.io/blog/ai-web-app-pentesting-test-on-every-major-release</a></body>

<body>Intruder's continuous exposure management platform helps security, IT, and engineering teams stop breaches before they start. For more information about Intruder’s products and services, please visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/intruderbh">https://securityweekly.com/intruderbh</a>.</body>

<body>Intruder's continuous exposure management platform helps security, IT, and engineering teams stop breaches before they start. For more information about Intruder’s products and services, please visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/intruderbh">https://securityweekly.com/intruderbh</a>. </body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15623″} podcast from PPWorks

Vulnerability Management

AI Pentesting and the Future of Cybersecurity – Chris Wallis – BH26 #1

Cloud Computing Security – Vulnerability and Threat Management S

Attack surface management

Breach and attack simulation

Nexus

Tech Explainer

What Attack Surface Management Actually Controls

Success Path Concept – Arrows Leading to WIN Cube, Avoiding Mistake Symbol, Abstract Business Strategy, Decision Making, Risk vs Reward

Implementation Guides

How to Build an Attack Surface Management Operating Model

Cyber Attack A01

Buyer's Guide

How to Evaluate ASM Platforms

Continuous threat web, glowing exposure metrics, advanced management environment

Why Attack Surface Reporting Should Change for Executives

Mitigating ransomware attacks in cybersecurity strategies for businesses to enhance protection and resilience

Mitigating ransomware attacks in cybersecurity strategies for bu

How to Evaluate Attack Surface Reduction and Remediation Workflows

Businessman touching digital balance scale icon with AI and data network interface,concept of artificial intelligence ethics,regulation,compliance and responsible technology governance