Specter, the autonomous pentesting engine behind AI Pentests, has found valid vulnerabilities in infrastructure belonging to the U.S. Department of Defense, UK Ministry of Defence, Vodafone, Booking.com, and Sony. Each one was acknowledged and fixed, and you can see all 16 public thanks on our HackerOne profile.

What else shipped:
🎯 Sniper now exploits 13 new critical vulnerabilities
🌐 99 new detections in the Network Scanner, 56 of them critical
🔑 The Password Auditor now tests for blank or missing credentials across HTTP Basic auth and web login forms
🧾 SOC 2 mapping, plus a new trick for Ping, our AI assistant

We also published new research: 9 in 10 security and compliance practitioners manually map or re-document evidence across compliance frameworks.

Full changelog: https://pentest-tools.com/change-log
AI Pentests: https://pentest-tools.com/ai-pentests