Search

Offensive Security

13 posts

What continuous offensive security testing is and how to implement it

Offensive Security

What continuous offensive security testing is and how to implement it

Introduction Continuous offensive security testing (COST) is a model for running adversary-style tests whenever something material changes, such as a release, a new internet-facing asset, or a change to a security control. Instead of the standard once a year test, Gartner introduced COST as a term to describe this trigger-driven intelligence-led approach. Escape's evidence standard supports that idea: a finding only counts after it has been reproduced in your own environment, with the requests

Antoine Carossio

Antoine Carossio

20 min read

LLM security testing: how to pentest LLMs and MCP servers

Offensive Security

LLM security testing: how to pentest LLMs and MCP servers

LLM security testing for pentesters: map attacks to the OWASP LLM Top 10, break a vulnerable MCP server locally, and turn what you find into regression tests. Including solutions for enterprise scale.

Antoine Carossio

Antoine Carossio

19 min read

Escape found the same XSS in two AI chatboxes. The vulnerability was in the Markdown renderer.

Offensive Security

Escape found the same XSS in two AI chatboxes. The vulnerability was in the Markdown renderer.

Weeks apart, at two unrelated companies, Escape's AI pentesting agent found the same stored XSS. Both had shipped a customer-facing chat where the model emits Markdown and the frontend renders it with raw HTML enabled and no sanitizer, so anything the model can be made to say executes in the browser of whoever reads the transcript next. Ask your own frontend team how many places in your product render Markdown that a model produced, and the honest answer is usually a number followed by "probabl

Gwendal MognierGeoffrey Diederichs

Gwendal Mognier, Geoffrey Diederichs

8 min read

Horizon3.ai alternatives

Offensive Security

Horizon3.ai alternatives in 2026: Escape vs NodeZero and 4 more tools

Escape is the best Horizon3.ai alternative for continuous AI pentesting across APIs, web apps, and complex authentication, including regression testing, developer-ready remediation, and platform pricing suited for rapidly scaling orgs.

Alexandra Charikova

Alexandra Charikova

21 min read

escape vs pentera

Offensive Security

Escape vs Pentera: how each one proves exploitability (2026)

Most teams arrive at this comparison with the wrong framing: two automated penetration testing platforms, pick one. Start with what Pentera actually is, because the comparisons that skip this get everything after it wrong. Pentera is an exposure validation platform with a key focus on network testing, and a good one. Pentera Core runs inside your network doing what a red team does in the first week of an engagement: cracking credentials, moving laterally, escalating privilege, testing Active Di

Alexandra Charikova

Alexandra Charikova

14 min read

Pentera Alternatives for Continuous Pentesting: 7 Competitors Compared In-Depth

Offensive Security

Pentera Alternatives for Continuous Pentesting: 7 Competitors Compared In-Depth

Most security and IT teams we talk to who are evaluating Pentera alternatives are mostly happy with what Pentera does. What changed is the shape of the problem underneath them. It used to be a network problem. Now it is also a web application problem, and the tool hasn't kept up with the complexity of modern applications. A manual pentest comes back with a critical on a customer-facing API that the automated pentesting tool never touched, and the uncomfortable part is not the finding itself but

Alexandra Charikova

Alexandra Charikova

21 min read

Continuous penetration testing: what it means when the testing never stops

Offensive Security

Continuous penetration testing: what it means when the testing never stops

In late 2025, Anthropic disclosed the first documented cyberattack run largely by AI, a state-linked group that used Claude Code to run 80 to 90 percent of an espionage campaign on its own, at thousands of requests a second. Offense now moves at machine speed while most defenses stay scheduled once a year, and closing that gap is what continuous penetration testing is supposed to do, even if it has become a phrase a dozen vendors claim, and almost none define with technical precision. This art

Alexandra Charikova

Alexandra Charikova

10 min read

Penetration testing as a service (PTaaS), explained

Offensive Security

Penetration testing as a service (PTaaS), explained

Penetration testing as a service (PTaaS) made buying a pentest almost frictionless. You scope it in a portal, watch findings land on a live dashboard, and click a button to retest the fix, all without a single procurement call. But the test still runs on a schedule, so weeks after it ends you get a report on a version of your app that shipped dozens of releases ago, and everything in between went out untested. PTaaS fixed how you buy a pentest, not when your coverage runs. This guide covers wha

Antoine Carossio

Antoine Carossio

10 min read

Top continuous penetration testing tools with expert review

AI pentesting

7 best continuous penetration testing tools in 2026

Continuous penetration testing tools close the gap in coverage left by annual pentests. This guide breaks down the best options, what each tool actually does, and how to choose.

Sanjana Iyer

Sanjana Iyer

21 min read

How Escape AI Pentesting Exploited SSRF in LiteLLM

Agentic Pentesting

How Escape AI Pentesting Exploited SSRF in LiteLLM

At Escape, we routinely test the AI infrastructure that teams deploy inside their cloud environments. LLM gateways, RAG pipelines, model proxies: these are services that make outbound HTTP requests by design, which makes them natural targets for SSRF. When we looked at LiteLLM, we found three confirmed SSRF sinks, a security gate that was specifically built to prevent this exact bug class, and a bypass that means the gate itself is broken. The organization has confirmed to our research team th

Yacine Souam

Yacine Souam

9 min read

Benchmarking AI Pentesting Tools: A Practical Comparison

Application Security

Benchmarking AI Pentesting Tools: A Practical Comparison

We benchmarked 4 AI pentesting tools: Escape, Shannon, Strix, and PentAGI against a modern vulnerable application. Learn more about their detection rates, false positive rates, and scanning speed.

Gwendal Mognier

Gwendal Mognier

12 min read