Has anyone found BOLOS using Autonomous pentest platform?
Source Reddit BlueTeam
Discussion
This content discusses the launch of an autonomous pentesting platform by Astra Security, designed to identify business logic vulnerabilities using AI-driven agents. The platform offers two modes: a structured checklist-style pentest and a 'bounty hunter' mode that dynamically pursues promising leads. The post is a developer's introduction and invitation for feedback rather than a report of a specific security threat or vulnerability. No actual security vulnerability or exploit is described or confirmed.
r/AskNetsec (opens in a new tab)u/Billybutchergotgun0 points0 comments
Oi, dev from Astra here.
Me and my team spent the last 5 months building an autonomous pentesting platform that could crack business logic vulns. Yes we did it.
The challenge here is that our agents need to understand what the application is supposed to do.
There were some hiccups initially, but we made it. Our internal tests showed better results than we expected.
How it works under the hood: Once you give access, our tool unleashes dozens of agents across your attack surface, and customers get two modes.
- Structured mode: does a systematic, thorough, checklist-style pentest.
- Bounty hunter mode(MY FAVOURITE🔥): It follows instincts, chases promising leads, and can spin up tools and exploits on the fly. (The experience of using this will be freaking cool)
Also, we have a proper guardrail setup so you don't need to worry
PH link: https://www.producthunt.com/products/astra-security?launch=astra-autonomous-pentest
To learn more: https://www.getastra.com/autonomous-pentesting
Quick reality check, this doesn't replace pentesters. Think of it as a junior pentester with unlimited energy and zero attention bias lol😂
Happy to answer any technical questions about agents, limitations or whatever. Roast it if you want, I'm ready. What do you guys think?
Billy Butcher, AKA dev from Astra