HackerSec Launches AI-Native Pentest Platform with Yaga Agent for Automated Offensive Testing
HackerSec, an offensive cybersecurity company, has launched a major update to its pentest platform featuring a new Pentest AI-Native technology. In this model, an AI agent takes over complete execution of offensive tests while human specialists only monitor the operation and validate each vulnerability.
The platform performs reconnaissance, enumeration, validations, exploitations, impact confirmation, and evidence production autonomously. Cybercriminals are already deploying AI agents to automate reconnaissance, identify vulnerabilities, and scale offensive campaigns. At the same time, organizations across sectors accelerate development with AI, producing more updates, more production code, and a constantly expanding attack surface that requires pentesting to keep pace.
In the AI-Native model, the intelligence receives the scope, investigates the environment, interprets system responses, formulates hypotheses, and adapts its strategy based on results. The agent maintains full operational context and continues exploring different paths until confirming whether a vulnerability is truly exploitable, enabling complete, continuous testing with reduced human intervention.
At the center of the platform is Yaga, the pentest agent developed from scratch by HackerSec. The technology uses a proprietary harness that coordinates tools, playbooks, multiple analysis stages, and different AI models during the same execution. Instead of depending on the reasoning of a single model, Yaga combines distinct capabilities to interpret the target, select techniques, execute authorized attacks, and technically validate findings.
Results published on YagaBench demonstrate the impact of this multi-model architecture. The production configuration of Yaga, operating with four combined models, solved 91.2% of black box scenarios, 94.6% of gray box scenarios, and 93.5% of white box scenarios. This performance highlights that the platform's advantage lies in the proprietary offensive orchestration layer developed by HackerSec.
“Our goal is to achieve, by the end of the year, more than 98% effectiveness in all AI-Native pentests with Yaga,” commented Andrew Martinez, CEO of HackerSec. New cyber environments change at a speed that no longer matches point-in-time pentests, long cycles, and high dependence on manual execution. The AI-Native model allows companies to perform offensive testing more frequently, expand coverage, and reduce the time between vulnerability emergence and identification while keeping human experts responsible for monitoring and technical validation.
Related articles
AgentForger Vulnerability in ChatGPT Workspace Agents Enabled Malicious AI Deployment via Single Phishing Link
A vulnerability in ChatGPT Workspace Agents allowed attackers to create and deploy a malicious AI agent inside an organization from a single phishing link. Named AgentForger, the flaw was fixed by OpenAI on June 8, 2026. The attack exploited a permissive parameter in the Agent Builder that accepted instructions directly through the URL. An authenticated user opening the prepared link would trigger automatic execution of the command without additional confirmation. The victim required access to Workspace Agents and at least one pre-authorized enterprise connector such as Outlook, Gmail, Google Drive, Slack, Teams, or Google Calendar. The malicious prompt instructed the platform to create an agent, connect available applications, disable approval requests, publish the component, and schedule it for recurring operation. In the demonstration, the agent monitored emails from the attacker with subjects starting with “TASK” and executed the contained instructions while returning results to the attacker-controlled address.
AI Coding Tools Under Fire: Grok Build Uploads Entire Git Histories, Claude Code Suspected of Silent Transfers
Security researcher cereblab uncovered that Grok Build 0.2.93 establishes separate HTTPS channels to exfiltrate full Git repositories, resulting in a 27800-fold traffic discrepancy between task context and storage uploads to Google Cloud Storage buckets. The tool ignores user instructions such as "do not read" and decouples the improve_model_enabled client switch from the server-controlled trace_upload_enabled flag, allowing continued uploads even when privacy settings are disabled. Similar concerns emerged around Claude Code, which maintains undisclosed WebSocket connections that transmit file paths, dependency trees, and code metadata without user awareness or audit logs. Comparative traffic audits showed that Codex and Gemini produced no anomalous outbound activity, while Grok Build and Claude Code were the only tools confirmed to perform data transfers beyond user authorization. The incidents highlight systemic issues including server-side remote control of client behavior, lack of third-party audits for closed-source binaries, and the conflict between model training data needs and user data sovereignty. Experts recommend zero-trust measures such as network blocking, Docker sandboxing without mounting .git directories, git filter-repo sanitization, and preference for auditable open-source alternatives like Continue.dev or locally deployed Ollama models.
PentesterFlow Launches Open-Source AI CLI Tool for Penetration Testers and Bug Bounty Hunters
PentesterFlow is a new open-source, human-in-the-loop AI command-line tool designed specifically for penetration testers and bug bounty hunters. It automates the full workflow from reconnaissance to report generation while requiring explicit analyst approval before executing sensitive commands. The tool addresses common issues in agentic AI security tools such as hallucinations, weak context retention, and poor tool integration by incorporating built-in pentesting skills and evidence-based vulnerability confirmation. It supports connections to local or hosted LLMs including Ollama, Gemini, Groq, and others, and features continuous local learning that stores user preferences and lessons without retraining models. A key differentiator is its integration with Burp Suite and a permission-based execution model that includes a YOLO mode for isolated environments. The project positions itself as a transparent alternative to fully autonomous tools like PentAGI and PentestGPT.
Optimizing Cybersecurity Content for LLMs: How Sites Can Enter Generative AI Answers
Search engines and AI services like ChatGPT, Gemini, Perplexity, Copilot and Google AI Overviews increasingly deliver synthesized answers instead of link lists. For cybersecurity publishers this changes competition because high traditional rankings no longer guarantee visibility or accurate citation. The article explains GEO, AEO and LLMO practices, shows how material moves through indexing, fragment selection and summarization stages, and stresses the need for self-contained facts that survive extraction and paraphrasing. It provides concrete writing frameworks for vulnerability reports, including required fields such as CVE identifiers, affected versions, attack conditions and real-world exploitation evidence. Technical requirements cover correct robots.txt handling for Googlebot, OAI-SearchBot, GPTBot and Bingbot plus the use of IndexNow for rapid updates. The piece also warns about poisoning risks, prompt injection and slopsquatting attacks that can feed false data into generative systems.