BLOG

AigentX, our autonomous web-application penetration testing agent, ran black-box against OWASP crAPI and confirmed 35 exploitable findings, 15 of them Critical, including a chain that turns a free signup account into uid=0(root) and a permanently forged admin identity. Every finding below carries a request, a response, and a reproduction. The full report is one click away. 35 Confirmed Findings 15 Critical 11 High 4 Kill Chains 0 False Positives Most “AI found N vulnerabiliti

More often than not, we see our clients show interest in other companies. This pull can come in many different forms, but it's usually...

Penetration testing has always been a way for companies to test their resilience to a cyberattack and their preparedness. In recent...

Application security is not new. It has been around since the early 2000s and in a similar environment, where Code-Red, Nimda, and other viruses were causing global havoc. Securing the software development lifecycle was initially a Microsoft initiative developed due to the growing number and impact of vulnerabilities in its products and code. The model has significantly evolved since, though the principles remain the same: catch security bugs early on in the development cyc

Prototype pollution attack is a relatively new and slightly unfamiliar vulnerability. However, in the last few years, we have benefitted...