Why vulnerability assessment is broken
For years we have measured security progress by how many vulnerabilities we discover. The result is predictable: enterprises now receive tens of thousands of findings across networks, applications, cloud and identities, and no team can remediate all of them. This is not security. It is a backlog with a compliance stamp on it.
The problem is not only volume. Scanners generate false positives that burn analysts’ most expensive hours and treat every finding as isolated. A missing patch on a low-value server may get more attention than a chain of minor weaknesses that together hand an attacker a critical system. Teams suffer alert fatigue while staying blind to the paths that matter.
A scanner sees a list of doors. It cannot think like an attacker: compromise one host, reuse credentials, move laterally, escalate privilege, and cross from an application into cloud infrastructure. Human red teamers can find those paths, but they are scarce, expensive and impossible to scale. So most organisations test a fraction of their assets, once or twice a year. Attackers do not follow that schedule.
How AI is changing the offensive security landscape
The shifts in AI. Agentic AI can now reason, plan and act creatively across a long sequence of steps. It can investigate a target, form a hypothesis, pick a tool, learn from a failed attempt and continue through a multi-stage attack. AI can now do things which only skilled humans could do.
The risks of using AI. That same power carries risk. In July 2026, OpenAI disclosed that models under a cyber evaluation escaped their sandbox, chained vulnerabilities, escalated privilege, reached the open internet and compromised Hugging Face’s production infrastructure while pursuing the benchmark. It proved two things at once: how capable these agents have become, and how dangerous they are without containment.
How the bad guys are adopting it. Attackers no longer probe once and move on. They attack continuously and with sophistication once reserved for nation-states. What changed is scale: AI lets a modest adversary operate with the depth and persistence of a large team. Sophistication at scale is now the baseline threat, not the exception. Defenders cannot answer that with annual tests and static scanners.
The future is AI-powered offensive security, engineered safely
The answer is autonomous penetration testing, but an AI model alone is not a security system. The engine is not the car. An LLM is one component; the real capability comes from the engineering around it: persistent context, attack methodology, access to tools, feedback loops, memory across long attack chains, and a way to validate whether an exploit actually worked.
Just as important is the control layer. An offensive agent must operate safely – inside explicit scope, permissions and safety rules, with sandboxing, rate limits, approval gates for high-impact actions, audit trails, monitoring and a stop switch. This surrounding architecture, harness engineering decides whether AI becomes a reliable tester or an uncontrolled risk. The future belongs not to whoever has the largest model, but to those who pair capable models with specialised tools, security intelligence and strong governance.
The four shifts in offensive security
AI moves from optional to foundational. Defensive testing without AI simply cannot keep pace with AI-enabled attackers.
Safety and governance become non-negotiable. After incidents like OpenAI’s, no board will accept an autonomous offensive agent without a harness around it. Governed AI is the only acceptable AI.
Coverage goes full breadth and full depth, continuously. Testing 20 percent of assets once a year was a compromise dressed as diligence. The baseline is now everything: internal and external infrastructure, apps, APIs, cloud and identities validated continuously.
Point tools converge into one platform. Attack-surface discovery, vulnerability assessment, application and infrastructure testing, breach simulation and red teaming can no longer sit in silos. Only a unified system can follow an attack across them and produce proof of exploitability.
Regulators are moving the same way. SEBI’s Cyber Security and Cyber Resilience Framework mandates red teaming for regulated entities and points them toward continuous automated red teaming; in May 2026 it issued an advisory on advanced AI tools for vulnerability detection. Human experts stay essential — setting objectives, testing business logic, reviewing high-impact actions, but their role shifts from running every test to supervising fleets of agents.
The vulnerability scanner told us what might be wrong. The next generation of penetration testing will show what an attacker can actually do across the enterprise, repeatedly, safely, and at machine speed.
Authored by Bikash Barai, Founder and CEO of Firecompass