It reads like an advertisement for software-automated pentesting that just forgot to include a link to what they’re selling.

I don’t know if that’s the intent, but…

Also, if you want free pentesting, you could always just “accidentally” include credentials to something you push to GitHub. It’s free, AND done by a human!

Edit: LMAO, it is an ad. A “contributed piece from our partners” line down at the bottom.

Looks like an LLM wrote this peace of garbage.

I do QA Automation for a large software company. We still have manual QA testing, because it’s costly and sometimes impossible to automate everything.

Also, there is no scenario where you can automate everything until you can automate social engineering. It’s why scammers don’t bother trying to hack your bank but instead try to get you to buy $2000 in Applebee’s gift cards to settle “an IRS debt that you need to fix RIGHT NOW!”

While the broader cybersecurity field has seen rapid advancements, such as AI-driven endpoint security

Ya, about that “AI-driven endpoint security”, it does a fantastic job of generating false positives and low value alerts. I swear, I’m to the point where vendors start talking about the “AI driven security” in their products and I mentally check out. It’s almost universally crap. I’m sure it will be useful someday, but goddamn I’m tired of running down alerts which come with almost zero supporting evidence, pointing to “something happened, maybe.” AI for helping write queries in security tools? Ya, good stuff. But, until models do a better job explaining themselves and not going off on flights of fancy, they’ll do more to increase alert fatigue than security.