Search

Escape - Application Security & Offensive Security Blog

Explore practical offensive and application security insights covering web application testing, emerging AI cybersecurity research, API and GraphQL security, and advanced testing techniques.

Filters

Continuous penetration testing: what it means when the testing never stops

Offensive Security

Continuous penetration testing: what it means when the testing never stops

In late 2025, Anthropic disclosed the first documented cyberattack run largely by AI, a state-linked group that used Claude Code to run 80 to 90 percent of an espionage campaign on its own, at thousands of requests a second. Offense now moves at machine speed while most defenses stay scheduled once a year, and closing that gap is what continuous penetration testing is supposed to do, even if it has become a phrase a dozen vendors claim, and almost none define with technical precision. This art

Alexandra Charikova

Alexandra Charikova

10 min read

Penetration testing as a service (PTaaS), explained

Offensive Security

Penetration testing as a service (PTaaS), explained

Penetration testing as a service (PTaaS) made buying a pentest almost frictionless. You scope it in a portal, watch findings land on a live dashboard, and click a button to retest the fix, all without a single procurement call. But the test still runs on a schedule, so weeks after it ends you get a report on a version of your app that shipped dozens of releases ago, and everything in between went out untested. PTaaS fixed how you buy a pentest, not when your coverage runs. This guide covers wha

Antoine Carossio

Antoine Carossio

10 min read

Escape joins Anthropic’s Cyber Verification Program to advance AI-powered offensive security

Announcement

Escape joins Anthropic’s Cyber Verification Program to advance AI-powered offensive security

Good news doesn't arrive alone. This month we joined not one frontier AI program but two! Yesterday we shared that Escape joined OpenAI's Trusted Access for Cyber. Today we're a verified member of Anthropic's Cyber Verification Program. Both programs solve the same problem. The most useful security research is dual-use by nature. Ask a model to find a broken authorization check and prove it's exploitable, and you've just described an attack. It's the same one a defender runs to close the gap fi

Alexandra Charikova

Alexandra Charikova

2 min read

Escape joins OpenAI’s Trusted Access for Cyber (TAC) to advance AI-powered offensive security

Announcement

Escape joins OpenAI’s Trusted Access for Cyber (TAC) to advance AI-powered offensive security

We've been approved for OpenAI's Trusted Access for Cyber preview. For years we've been building toward one idea: offensive security that runs continuously inside engineering, instead of arriving twice a year as a PDF nobody reads past the executive summary. Business-logic DAST first, then application-layer attack surface management, then Cascade, our AI pentesting agent. Three products on one offensive security engineering platform, because a list of assets, a stream of findings and a pentest

Alexandra Charikova

Alexandra Charikova

4 min read

Top continuous penetration testing tools with expert review

AI pentesting

7 best continuous penetration testing tools in 2026

Continuous penetration testing tools close the gap in coverage left by annual pentests. This guide breaks down the best options, what each tool actually does, and how to choose.

Sanjana Iyer

Sanjana Iyer

21 min read

Why does the rise of Agentic AI force security teams to become research-aware?

Research

Why does the rise of Agentic AI force security teams to become research-aware?

Bruce Schneier : "security is a process, not a product". It’s not enough to audit your application once, every new feature introduces new attack surfaces that must be taken into account when evaluating the security of the application as a whole. For example, a company rolling out a new Agentic AI process without adequate guardrails might expose themselves to MCP tool poisoning, an emerging class of attacks where malicious actors leverage the trust placed in a tool metadata to steer th

Arnaud Fanthomme

Arnaud Fanthomme

8 min read

Best AI DAST tools in 2026: ranked, compared, and reviewed for enterprise security teams

DAST

Best AI DAST tools in 2026: ranked, compared, and reviewed for enterprise security teams

Every DAST vendor put "AI" on the homepage this year. The word now means ten different things to different tools, and even when discussing with analysts, they mention they give an "AI" badge when a certain capability checks the box. This is our attempt to fix that, with a ranked, honest comparison of the AI DAST platforms worth your evaluation time in 2026. Here's what that looks like from the buyer's side: "I am feeling a bit skeptical with the AI across any security vendor and across all the

Alexandra Charikova

Alexandra Charikova

20 min read

Fix issues with a prompt built for your coding agent

Product updates

Fix issues with a prompt built for your coding agent

There's a translation step between a security finding and a fix, and it's usually done by hand. Someone opens the issue, reads the description, checks the CVSS score, follows the link to the affected asset, works out which endpoint is actually involved, then writes all of it back out as a prompt for whatever agent they code with. The information was already there. It just wasn't in the shape the agent needed. Escape now does that step for you. From any issue in the platform, you can send the

Alexandra Charikova

Alexandra Charikova

2 min read

Modern AI-powered Pentesting Tools In-Depth benchmark

AI pentesting

Modern AI-powered Pentesting Tools In-Depth benchmark

If you're evaluating AI for offensive security right now, you're weighing two questions at once. The first: why not skip the tooling and point a frontier model at your apps yourself? The second: among the AI pentesting tools you could actually buy, which one earns the budget? We built this benchmark to answer both. Cascade, Escape’s multi-agent AI pentesting engine, went up against a single frontier model (Claude Opus 4.8) driven directly at the same targets. The only variable is the harness ar

Antoine Carossio

Antoine Carossio

15 min read

Two Critical Vulnerabilities, One AI Pentester: How Cascade Found an Unauthenticated RCE and Walked Around the WAF

AI pentesting

Two Critical Vulnerabilities, One AI Pentester: How Cascade Found an Unauthenticated RCE and Walked Around the WAF

TL;DR We pointed Cascade, Escape's AI pentesting solution, at a single Spring + JSP customer portal. It came back with two findings that are typically difficult for traditional Dynamic Application Security Testing (DAST) scanners to detect: * Unauthenticated RCE via SpEL injection. A ref request parameter was dropped, unsanitized, into a spring:eval expression inside a global JSP template. Because the JSP engine substitutes the value before SpEL parses it, an attacker controls the expression

Karim Rustom

Karim Rustom

11 min read

How Escape helped Bridgetech Group replace pentests with automated evidence

Case Study

How Escape helped Bridgetech Group replace pentests with automated evidence

Security scanning that doesn't feel like going to the dentist. See how Bridgetech Group uses Escape for authenticated security testing and API scanning, replacing costly manual pentests with customer-ready security evidence for ISO 27001 and enterprise procurement.

Alexandra Charikova

Alexandra Charikova

6 min read