AI pentesting
Disclosure-to-exploit time is now hours, not weeks. Escape Continuous AI Pentesting tests only what each release changes, on every merge, deploy, or schedule. Attack paths are tailored from past reports and with OSCP certifications you can always stay audit-ready.
AI pentesting
Why AI pentesting struggles with consistent vulnerability coverage, why repeated runs don't scale, and how Cascade makes autonomous security testing more reliable.
Product updates
How Cascade 2 Iguazu's scheduler and shared coverage map work together, how we benchmark the engine, and what two rounds of internal benchmarks reveal.
Escape's research team found two stacked flaws that led to an auth bypass enabling any member to delete all members' likes on comments. It's now CVE-2026-103288, found only by testing as multiple low-auth users to see what they could do with data they shouldn't have access to.
Agentic Pentesting
Introducing Cascade Iguazu: version 2 of our pentesting engine Cascade. Now with a scheduler-driven multi-agent architecture ensuring consistent, repeatable runs, much wider coverage, and a fully readable trail of what happened.
Security Research
Security teams now use agents for a wide range of work, from finding vulnerabilities in code to investigating and triaging issues. Many of these tasks need complex reasoning and an understanding of how an application works, so the shift makes sense. We're also seeing more security use cases where an LLM may be more than the job needs. Triage is a good example. We ask an LLM whether a finding is a false positive, give it the context it needs, extract its decision as JSON, and use that to trigger
php2shell is a pair of critical memory-safety vulnerabilities in the PHP engine itself, tracked as CVE-2026-109618 and CVE-2026-109619. Escape detects affected PHP versions across your attack surface and shows you every exposed asset that needs the patch. php2shell is not a WordPress bug, a Drupal bug, or a bug in your code. It is in PHP itself. Both CVEs trace back to the same weakness: when a fatal error, usually out of memory, interrupts a request, PHP destroys the request heap but leaves so
Developers are standing up AI agents and MCP servers faster than security can test all the data flows they introduce, and often faster than anyone can agree on the guardrails. Layer on the APIs behind them and you have a whole new attack plane. The use of AI systems in applications has exploded across the board, and in high-stakes environments, from finance to healthcare and everything in between. Yet the APIs behind the MCP server see broken authorization or too much trust in their caller, a
Compliance
Which compliance frameworks accept AI pentests? What are the differing requirements across frameworks and what do you need to fulfill them? This is your one-stop guide to being compliance ready before your next audit.
Offensive Security
Introduction Continuous offensive security testing (COST) is a model for running adversary-style tests whenever something material changes, such as a release, a new internet-facing asset, or a change to a security control. Instead of the standard once a year test, Gartner introduced COST as a term to describe this trigger-driven intelligence-led approach. Escape's evidence standard supports that idea: a finding only counts after it has been reproduced in your own environment, with the requests
Product updates
Offensive security teams are covering more dev teams every quarter without their own headcount growing to match. Their roles continue to be forced into project management and firefighting instead of finding the vulnerabilities that get them speaking spots at conferences. Our latest batch of features removes manual steps that eat away a security engineer's week. Waiting on a full re-run to confirm a fix, manually entering credentials into scan configs, zipping source code over Slack, or chasing
AI pentesting
Scanner with a chatbot A real AI pentest Login Stops at the login page Authenticates and tests behind it Identities Tests as one user Holds several at once Findings A list it never reproduced Every one reproduced before it files
AI pentesting
Starts from Asks You get back External pentest The public internet, no access Can an attacker get in at all A demonstrated way in Internal pentest An assumed foothold How far they get once inside A lateral-movement path Vulnerability scan An asset list you supply Is any known issue present A list of possibilities
Pentesting
Introduction An unpatched flaw is now the most common entry point for a breach, at 31%, ahead of stolen credentials at 13%, and the median time to fix one has crept up to 43 days (Verizon's 2026 DBIR). So an annual pentest is always a step behind, and you're two or three people being asked to test continuously with no budget to hire your way there. This is how to build a continuous penetration testing program without hiring more pentesters, by splitting the work so the part that scales runs its
Case Study
Amp is building the AI hiring team for frontline employers. Compliance was in the product from day one, which meant a pentest in year one. Here is how they scoped it, ran it in hours with Escape, and made sure they're ready for their SOC 2 Type II audit.
Offensive Security
LLM security testing for pentesters: map attacks to the OWASP LLM Top 10, break a vulnerable MCP server locally, and turn what you find into regression tests. Including solutions for enterprise scale.
Offensive Security
Weeks apart, at two unrelated companies, Escape's AI pentesting agent found the same stored XSS. Both had shipped a customer-facing chat where the model emits Markdown and the frontend renders it with raw HTML enabled and no sanitizer, so anything the model can be made to say executes in the browser of whoever reads the transcript next. Ask your own frontend team how many places in your product render Markdown that a model produced, and the honest answer is usually a number followed by "probabl
Offensive Security
Escape is the best Horizon3.ai alternative for continuous AI pentesting across APIs, web apps, and complex authentication, including regression testing, developer-ready remediation, and platform pricing suited for rapidly scaling orgs.
Announcement
After announcing our channel partner program last month, we are excited to now be working with eleven incredible partners, with more soon to join us! Escape's Channel Partner Program is built on a simple principle: a two-way relationship centered on the shared goal of helping security teams do more with the people they have. Our channel partners all play an imperative role in ensuring that these security teams can slot Escape into their security stack and existing workflows to build a continuo
Offensive Security
Most teams arrive at this comparison with the wrong framing: two automated penetration testing platforms, pick one. Start with what Pentera actually is, because the comparisons that skip this get everything after it wrong. Pentera is an exposure validation platform with a key focus on network testing, and a good one. Pentera Core runs inside your network doing what a red team does in the first week of an engagement: cracking credentials, moving laterally, escalating privilege, testing Active Di
Offensive Security
Most security and IT teams we talk to who are evaluating Pentera alternatives are mostly happy with what Pentera does. What changed is the shape of the problem underneath them. It used to be a network problem. Now it is also a web application problem, and the tool hasn't kept up with the complexity of modern applications. A manual pentest comes back with a critical on a customer-facing API that the automated pentesting tool never touched, and the uncomfortable part is not the finding itself but
Competitor Comparison
Last updated: August 2026. StackHawk's positioning changed materially in December 2025 with the launch of Business Logic Testing for APIs (Cross-profile BOLA/BFLA only), and again through 2026 with coding-agent integrations. This comparison reflects those changes.
Research
We pointed Cascade, Escape's AI pentesting engine, at a production AI agent. The agent had a guardrail built to catch prompt injection. Cascade got past it on the second try. The trick wasn't a smarter payload, just a different pretext, and the agent handed over its entire system prompt: the tools it could call, the rules it followed, and the session details attached to the conversation. That alone gives an attacker what they need to go straight at the agent's tools instead of guessing at them
Application Security
Authenticated vulnerability scanning reaches where your real risk lives, behind the login, and it is the kind of security scanning most tools fail at. A scanner hits the OAuth redirect, the MFA prompt, or the CAPTCHA, falls back to crawling as an anonymous visitor, and still finishes green, so the report says you are covered while the account APIs, admin flows, and tenant boundaries go untested. Authenticated apps break naive scanners in a handful of predictable ways, from OAuth redirects and
