More speed
The time between the disclosure of a vulnerability and the first attack keeps getting shorter. Attack tools are now built in hours instead of days.
AI at avantguard
Attacking realistically today means: with AI.
Attackers use AI and gain enormous efficiency from it. To keep your attack simulation true to life, it uses the same means: following recognised best practices and with local AI models for particularly sensitive information.
Why AI in your test
The threat is changing. Your test keeps pace.
Attackers use AI along the entire attack chain: for reconnaissance, for phishing and for developing their tools. A realistic security test has to reflect this level. That is why AI is part of your test too: for specific subtasks and under the direction of experienced testers.
More reach
AI analyses public information about your company at scale and turns it into personalised phishing emails in any language.
More adaptability
Attack tools are modified quickly until security controls no longer detect them.
Use by sensitivity
Frontier model or local AI: what matters is what is at stake.
Which model is used is decided per task, together with you. The deciding factor is how sensitive the information is. Typical examples from practice:
Frontier models
The most capable cloud models from leading providers. For tasks without particularly sensitive client information.
- OSINT
- Non-sensitive code reviews
- Phishing
- Security research
Local AI models
Sensitive dataRun on in-house infrastructure in Rapperswil-Jona, Switzerland. Your data never leaves this environment.
- Sensitive code reviews
- Reverse engineering
- Analysis of client documentation
- Exploit development
Safe use
Clear limits for every use of AI.
The basis is recognised best practice for using AI in offensive security, for example Anthropic's recommendations for the safe use of AI. This applies to every engagement:
Sensitive information stays in-house
As a rule, AI processes sensitive data on company-owned hardware. Frontier models are only used for sensitive data at your explicit request.
Humans in control
Experienced penetration testers carry out the engagement. AI only takes on individual subtasks, clearly defined and strictly controlled. Every finding is verified personally, so you can rely on every result.
Isolated environment
The AI tools run in isolated environments. Outbound connections are restricted to what is necessary.
No autonomy on critical systems
AI never acts on critical production systems. Tests there run on replicas or read-only.
Clear scope per engagement
Permitted targets, actions and network boundaries are defined before every use.
Traceable logs
Every use of AI is logged and remains traceable for you.
Questions?
Find out how AI is used in your project.