CERT24The blind spots of agentic pentesting and how to close them
The article discusses the benefits and limitations of agentic penetration testing. Agentic pentesting can dynamically identify exploit chains, but it tests only assets that can be reached safely and vulnerabilities for which an exploit can be executed. The source recommends combining agentic and deterministic testing and using control-evidence-based validation to assess remaining assets and vulnerabilities.