Bright Security launches AI-powered penetration testing module

Bright Security has launched AI PT, a new AI-powered penetration testing module designed to accelerate the identification and exploitation of software vulnerabilities. The module aims to reduce the time required for penetration testing from weeks to hours, providing continuous, AI-driven testing at a lower cost than traditional methods.

The launch addresses the shrinking window between the disclosure of a vulnerability and its exploitation. Research indicates that the gap between disclosure and the first exploit has decreased from approximately two years in 2018 to just hours in recent years. Furthermore, data from VulnCheck suggests that over 25% of exploited flaws are weaponized within 24 hours of becoming public.

Bright Security notes that frontier AI systems, such as Anthropic’s Claude Mythos and OpenAI’s Aardvark, are increasingly capable of discovering and weaponizing software flaws with minimal human intervention. The AI PT module utilizes purpose-built agents to map an organization’s live attack surface across applications and APIs to build threat models and execute exploits.