Cybersecurity provider Edgescan has introduced Edgescan Atomic, an autonomous penetration-testing solution designed to run continuous, on-demand offensive security checks. Built on agentic AI, the software enables organizations to simulate attacker behaviors to verify target vulnerabilities. It functions either as a standalone security testing engine or as an integrated extension to Edgescan's continuous security platform.
Grounding Autonomous Agents in Asset Data
Edgescan Atomic expands its assessment capabilities by drawing contextual details from Edgescan Intelligence. The agentic system can utilize historical scan logs, penetration-testing-as-a-service (PTaaS) records, validated vulnerability databases, and historical false-positive data. By processing target asset context, application programming interface (API) details, and authentication workflows, the tool establishes a comprehensive baseline to map and explore potential attack paths across corporate systems.
Enforcing Scope via Policy Controls
To ensure autonomous testing remains controlled and auditable, the system operates under the Edgescan Harness. This guardrail layer enforces predefined scope boundaries, permissions, administrative approval steps, and corporate policies over the AI agents. The framework allows the underlying system to adapt and reason like an adversary while maintaining clear activity logs and keeping all automated actions within designated limits.
Targeting Access Controls and Triage Workloads
The platform focuses on complex access-control and business-logic flaws, including insecure direct object reference (IDOR) vulnerabilities, authorization weaknesses, and broken access controls. Edgescan Atomic validates findings with supporting evidence before surfacing alerts to security operations teams, aiming to reduce investigation workloads. Tests can also involve human security experts when required, and the offering uses a licensing structure designed to provide predictable testing budgets.
Addressing Rapid Software Change
According to Edgescan CEO Eoin Keary, the release addresses traditional penetration-testing limitations that struggle to keep pace with rapid application code updates and AI-driven security threats. By granting teams the ability to trigger automated assessments whenever necessary, the software aims to provide faster validation cycles for enterprise security teams.
AI-generated editorial illustration; not a documentary photograph.
Source: Edgescan Atomic validates attack paths with controlled AI testing
SIGNAL TITANS
Leave a Reply