Product updates
Inside Cascade 2 Iguazu: how we benchmark our AI pentesting engine
How Cascade 2 Iguazu's scheduler and shared coverage map work together, how we benchmark the engine, and what two rounds of internal benchmarks reveal.
Platform
Escape Platform
Replace legacy scanners and manual offensive security processes with AI agents that discover, test, and remediate directly in your engineering workflows.
See moreProducts
AI Pentesting
Run continuous AI-powered pentesting that learns your business, proves exploitability, and delivers reports that auditors and engineers can act on.
Continuous AI Pentesting
Pentest every release on merge, deploy or schedule, with results in minutes and every open issue re-checked.
Business-logic-aware DAST
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
External network pentesting
Continuous testing of everything reachable from the internet. Every host, port, and exposed service is probed the way an attacker would, with proof of what's exploitable, followed by a retest.
Attack Surface Management
Discover and validate exposure of modern applications, APIs, and infrastructure from code to cloud.
News
By use case
Use case one
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
Use case two
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
Use case three
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
By industry
Resources
Blog
Explore offensive and application security insights
Customer stories
Learn what our customers achieve with Escape
Documentation
We're here to help you
The Elephant in AppSec Podcast
Listen to other practitioners’ stories
Pentester vs. AI challenges
Can you beat the machine?
Events
Discover our upcoming events across the world
Security Research
Modern AI-powered Pentesting Tools Benchmark
Where the only variable is harness.
Escape Research team found a PII disclosure in Keycloak
It's now CVE-2026-17059.
Escape found the same XSS in two AI chatboxes
The vulnerability was in the Markdown renderer.
State of GraphQL Security 2024
Leverage our in-house, AI-powered DAST to secure your applications at the business logic level
The State of Security of Vibe Coded Apps
How we discovered over 2k high-impact vulnerabilities in apps built with vibe coding platforms
Tools
As a Research Scientist at Escape, I help build the future of Agentic Pentesting systems. My background is in the theory of Neural Networks and Reinforcement Learning, which I now apply to Cybersecurity.
Product updates
How Cascade 2 Iguazu's scheduler and shared coverage map work together, how we benchmark the engine, and what two rounds of internal benchmarks reveal.
Arnaud Fanthomme, Antoine Carossio
10 min read
Research
Bruce Schneier : "security is a process, not a product". It’s not enough to audit your application once, every new feature introduces new attack surfaces that must be taken into account when evaluating the security of the application as a whole. For example, a company rolling out a new Agentic AI process without adequate guardrails might expose themselves to MCP tool poisoning, an emerging class of attacks where malicious actors leverage the trust placed in a tool metadata to steer th
Arnaud Fanthomme
8 min read
Alexandra Charikova
158 articles
Antoine Carossio
40 articles
Tristan Kalos
25 articles
Sanjana Iyer
24 articles
Achraf Ait Sidi Hammou
17 articles
Gautier Ben Aïm
12 articles
Escape - Offensive Security
11 articles
Gwendal Mognier
8 articles
Maxence Lecanu
8 articles
Karim Rustom
8 articles
Nohé Hinniger-Foray
8 articles
Alexandre Tang
7 articles