Product updates
Inside Cascade 2 Iguazu: how we benchmark our AI pentesting engine
How Cascade 2 Iguazu's scheduler and shared coverage map work together, how we benchmark the engine, and what two rounds of internal benchmarks reveal.
7 posts
Product updates
How Cascade 2 Iguazu's scheduler and shared coverage map work together, how we benchmark the engine, and what two rounds of internal benchmarks reveal.
Agentic Pentesting
Introducing Cascade Iguazu: version 2 of our pentesting engine Cascade. Now with a scheduler-driven multi-agent architecture ensuring consistent, repeatable runs, much wider coverage, and a fully readable trail of what happened.
AI pentesting
Scanner with a chatbot A real AI pentest Login Stops at the login page Authenticates and tests behind it Identities Tests as one user Holds several at once Findings A list it never reproduced Every one reproduced before it files
Agentic Pentesting
At Escape, we routinely test the AI infrastructure that teams deploy inside their cloud environments. LLM gateways, RAG pipelines, model proxies: these are services that make outbound HTTP requests by design, which makes them natural targets for SSRF. When we looked at LiteLLM, we found three confirmed SSRF sinks, a security gate that was specifically built to prevent this exact bug class, and a bypass that means the gate itself is broken. The organization has confirmed to our research team th
Application Security
We benchmarked 4 AI pentesting tools: Escape, Shannon, Strix, and PentAGI against a modern vulnerable application. Learn more about their detection rates, false positive rates, and scanning speed.
Agentic Pentesting
Escape is the best XBOW alternative for continuous AI pentesting across APIs, web apps, and complex authentication — with regression testing, developer-ready remediation, and platform pricing suited for rapidly scaling orgs.
Pentesting
Explore the best Agentic pentesting tools of 2026. Learn how modern pentesting solutions detect business logic flaws and scale continuous security testing, so security teams can replace manual pentests with faster, more accurate coverage.