Pentesting as a Service pioneer Cobalt announced Autonomous Pentest, integrated into the Cobalt Offensive Security Platform to deliver pentests with 24-hour results.
Traditional testing would happen monthly or quarterly, but that is no longer compatible with how fast software is shipped today. The Cobalt Autonomous Pentest provides a “high-risk method for identifying and validating exploitable vulnerabilities,” the company said in its announcement.
The new solution, with human technology at its center, brings measurement with the core capabilities of expert guidance, a model-agnostic AI agent, and providing next-day findings.
Autonomous Pentest leverages the experience of about 500 logins through the Cobalt Core community, who update the kill program, manage scope, and deliver adversarial thinking that the company says pure AI tools can’t provide.
The AI engine, informed by years of exploit data and more than 10,000 critical and high-intensity findings, predicts the chain, prioritizes and sequences dynamically, and adapts as the boundary changes and threat strategies.
“Meeting the demands of today’s development cycles requires more than traditional automation,” said Sonali Shah, CEO, Cobalt. “It requires reimagining how offensive security is delivered. Only Cobalt combines the four key features of modern offensive security: specialized human expertise, a context-aware platform, AI-enabled orchestration, and the industry’s largest dataset of real-world pentest results. Together, these capabilities enable security teams to proactively identify, prioritize and optimize software for operational risk.”
Is Cobalt Autonomous Pentest a replacement for compliance-driven human-led pentests?
No. According to Cobalt, Autonomous Pentest is designed to complement, not replace, human-led testing of compliance-driven protocols. The goal is to extend continuous coverage across the organization’s attack surface while maintaining comprehensive human-led assessment of assets that require depth of control.
What is Pentesting as a Service (PTaaS) and how does Cobalt’s platform fit into that model?
Pentesting as a Service (PTaaS) is an on-demand model that delivers penetration testing through a cloud platform, combining automated tools and human expertise, rather than project-based engagement. Cobalt’s Offensive Security Platform is positioned as a PTaaS offering that now extends to autonomous, structured AI testing with its new Autonomous Pentest capabilities.
What data does Cobalt’s AI engine use to enable personalized logins?
The AI engine draws on 14 years of exploit data and more than 10,000 critical and high-intensity detections collected through Cobalt’s Pentesting as a Service history. This dataset informs the prediction of attack sequences and sequences that evolve as threat strategies change.
