Cobalt Core Pentester

Cobalt Autonomous Pentest enhances continuous security testing. Cobalt has introduced Cobalt Autonomous Pentest, a new solution that enables continuous offensive security across an organization's full application portfolio. The offering delivers rapid, actionable penetration testing results with findings available within 24 hours. AI is fundamentally changing the pace of application security. AI-assisted development enables organizations to ship software faster than ever, while attackers are using AI to automate reconnaissance and accelerate exploitation. Traditional pentesting performed quarterly or even monthly, can no longer keep pace. As security teams face growing attack surfaces and constrained budgets, organizations need a more scalable approach to identifying and validating exploitable risk. Computer Security Cobalt Autonomous Pentest is fully integrated in the Cobalt Offensive Security Platform, and delivers this scale through three core capabilities: * Expert Direction: Seasoned Cobalt pentesters direct every engagement. Pentesters review the execution plan, enforce scope discipline, and bring the creative adversary reasoning that pure-AI tools cannot replicate. * Model Agnostic: The model-agnostic AI engine handles chain prediction, prioritization, and adaptive sequencing. Informed by 13 years of exploit data, it adapts as the frontier evolves and threat actor techniques change. * Findings in 24 Hours: Cobalt delivers next-day findings into Jira, GitHub, Slack, and 50+ other tools. Every finding includes proof of exploit where applicable, reproduction steps, and tailored remediation guidance so teams can act immediately. According to Omdia Research1, 94% of organizations see the importance of keeping humans in the loop for offensive security programs. Cobalt places human expertise at the center of its autonomous solution. The Cobalt Autonomous Pentest leverages the Cobalt Core, the company's community of approximately 500 rigorously vetted pentesters. "Meeting the demands of today's development cycles requires more than automating traditional pentesting," said Sonali Shah, CEO, Cobalt. "It requires rethinking how offensive security is delivered. Only Cobalt unifies the four critical elements of modern offensive security: elite human expertise, a context-aware platform, AI-powered orchestration, and the industry's largest dataset of real-world pentest results. Together, these capabilities enable security teams to continuously identify, prioritize, and remediate exploitable risk at the speed of modern software development." Development Tools The Cobalt Autonomous Pentest draws from more than 10,000 critical and high-severity findings. This powerful combination of exploit data and human expertise allows organizations to scale fast, flexible, and precise coverage across their entire attack surface. It extends coverage across the portfolio and complements human-led, comprehensive pentesting for compliance-driven engagements - the right testing model and depth for every asset. Availability: Cobalt Autonomous Pentest debuts at Black Hat USA 2026 (booth 4903), with general availability August 2026.

Cobalt showcases the future of Offensive Security at Black Hat USA and DEF CON with product innovations, executive speakers, and new brand debut. Jul 23, 2026 Est Read Time: 4 min BOSTON, July 23, 2026 - Cobalt(TM), the pioneer in pentesting as a service (PTaaS) and a leader in continuous offensive security testing grounded in human expertise, today announced the launch of Cobalt Autonomous Pentest, alongside its executive speaking engagements and research presentations taking place during Black Hat USA and DEF CON 34. Throughout the week, Cobalt will introduce its new autonomous pentesting capabilities, debut a refreshed corporate identity reflecting its evolution to continuous offensive security, and showcase cutting-edge research from its security experts and Cobalt Core pentester community. Visitors can meet the Cobalt team at Black Hat in Booth #4903 in the AI Zone, where executives, researchers and pentesters will be available for demonstrations, interviews and discussions on the future of AI-driven continuous offensive security. "Our industry is entering a new era where organizations must continuously validate their security posture against rapidly evolving AI-powered threats," said Gunter Ollmann, CTO at Cobalt. "Black Hat and DEF CON are the ideal venues to demonstrate how autonomous offensive security can help organizations move beyond periodic testing and toward continuous resilience." Autonomous Pentest Launch Making its debut at Black Hat USA, Cobalt Autonomous Pentest makes continuous offensive security possible across an organization's entire application portfolio. Drawing from more than 10,000 critical and high-severity findings, this powerful combination of exploit data and human expertise allows organizations to scale fast, with flexibility, and precise coverage across their entire attack surface. The solution extends security coverage across the full portfolio while complementing human-led pentesting for compliance-driven engagements. Introducing the New Cobalt Coinciding with the launch of Cobalt Autonomous Pentest, Cobalt is positioning itself to lead the Continuous Offensive Security Testing (COST) market with a refreshed corporate identity built to deliver fast, flexible, and precise security testing. The brand evolution features an updated visual identity and an enhanced product experience - reflecting a unified approach that combines elite human intelligence with advanced AI orchestration. This enables security teams to continuously identify exposures, stay ahead of threats, reduce risk, and maintain compliance. Featured Speaking Engagements: * The Barbershop Session: Risk in the Age of AI, Panel, Gunter Ollmann, CTO, Cobalt: The Barbershop Speakeasy, The Cosmopolitan, Tuesday, August 4 | 3:00-5:00 p.m. * Risk in the Age of AI: Core Findings from the AI and Pentesting Pulse Report 2026 Gunter Ollmann, CTO, Cobalt: Mandalay Bay, Room I, Thursday, August 6 | 1:30-2:00 p.m. * BigIron.ai: AI-Assisted Exploration and Security Analysis of Mainframe Systems, Demo Labs (Track 3), Adam Toscher, Sr. Security Researcher, Cobalt: LVCC West, Level 1, Hall 3 1003, Friday, August 7 | 3:00-3:45 p.m. and 4:00-4:45 p.m. * Deceiving AI Agents, Prompt Thieves, and LLM Attack Tooling, Adversary Village - Adversary Tool Demos, Adam Toscher, Sr. Security Researcher, Cobalt: LVCC West, Adversary Village, Saturday, August 8 | 1:30-1:45 p.m. Cobalt Core at Black Hat and DEF CON Members of the Cobalt Core, the company's elite team of pentesters, will present original research and hands-on training throughout the week, including: * MCParasite: Universal MCP Worm Security Testing Framework, Black Hat Arsenal, Utku Yıldırım, Cobalt Core Member: Mandalay Bay, Business Hall (Arsenal), Thursday, August 6 | 11:20 a.m.-12:20 p.m. * L.A.Y.E.R.S- Layered Analysis Engine for Browser Extension Risk and Security, Abhinav Khanna, Cobalt Core Member, LVCC West, Level 1, Hall 3 901 (Demo Labs Track 5), Friday, August 7, 2:00-2:24pm and Saturday August 8 | 1:00-1:45pm. * PMTC: One-Click RCE and Persistent Exfiltration in AI Coding Agents, Utku Yıldırım, Cobalt Core Member, Saturday, Red Team Village, August 8 | 10:00 a.m.-12:00 p.m. * MCParasite: Tool Poisoning and Agent-to-Agent Worm Propagation in MCP-Based AI Systems, Utku Yildirim, Cobalt Core Member, AI Village, Friday August 7 | 1:00-2:00pm Book Signing with Orhan Yıldırım Attendees are invited to meet offensive security strategist Orhan Yıldırım, a member of the Cobalt Core, for a book signing on Wednesday, August 5, from 4:00-5:00 p.m. at the Cobalt booth. Yıldırım's new book, Agentic Offensive Cybersecurity, explores how AI agents, MCP, and workflow orchestration are reshaping penetration testing and offensive security operations. Visit Cobalt at Black Hat USA: Booth #4903 - AI Zone About Cobalt Cobalt is the pioneer in pentesting as a service (PTaaS) and a leader in continuous offensive security testing grounded in human expertise. The Cobalt Offensive Security Platform spans the full spectrum of offensive security, from targeted, human-led pentesting to high-frequency, AI-driven autonomous security testing. Only Cobalt brings together the four critical elements of modern offensive security: elite human expertise, a context-aware platform, AI-powered orchestration, and the industry's largest dataset of real-world pentest results. Thousands of customers and hundreds of partners rely on Cobalt and its global network of 500+ vetted security experts to continuously identify, prioritize, and remediate exploitable risk with the speed, flexibility, and precision today's organizations require. Cobalt maintains an outstanding NPS of 9, reflecting its dedication to customer satisfaction. Read its reviews on G2 to see why customers love Cobalt. More at https://www.cobalt.io. Follow Cobalt on LinkedIn and X. Media Contact Leslie Kesselring Kesselring Communications for Cobalt [email protected] About Cobalt. Cobalt combines talent and technology to provide end-to-end offensive security solutions that enable organizations to remediate risk across a dynamically changing attack surface. As the innovators of Pentest as a Service (PtaaS), Cobalt empowers businesses to optimize their existing resources, access an on-demand community of trusted security experts, expedite remediation cycles, and share real-time updates and progress with internal teams to mitigate future risk. More By Cobalt Related readings. Never miss a story. Stay updated about Cobalt news as it happens

Beyond annual pentests: building your Offensive Security Program with Cobalt. Jul 14, 2026 Est Read Time: 2 min For many organizations, the traditional approach of annual or ad-hoc pentesting simply isn't enough to keep up with their fast-paced development cycles. As you innovate and release new features, a once-a-year security check leaves gaps, turning security into a potential blocker rather than an enabler. This is where a proactive approach to cybersecurity comes into play. The Power of an Offensive Security Program An offensive security program is a continuous strategy that tests every layer of your business - from code to company - to build confidence in your defenses. By simulating real-world attacks against your applications, infrastructure, and even internal processes, you gain assurance that your defenses work as expected. This strategic shift moves you from a reactive stance to a proactive one, securing your business end-to-end. A successful offensive security program emphasizes the layering of comprehensive annual pentests, focused pentests for new feature releases, and ongoing security monitoring. This combination allows you to proactively manage your security posture and develop a predictable cadence of testing that aligns with your application, network, and corporate security. The Cobalt Approach to Programmatic Pentesting Building an offensive security program with Cobalt ensures that as your business evolves, your security does too. Its approach goes beyond just finding vulnerabilities; it's about building a continuous security practice. This includes: * Regular, Broad Scope Pentesting: Ensuring your most critical assets undergo thorough security reviews, identifying high-risk vulnerabilities that could impact business continuity or compliance. * Narrow Scope Pentesting: Supporting new feature releases or significant updates with small, targeted pentests to validate their security posture. as you roll them out. This helps you innovate and release updates quickly and safely. * Continuous Security Monitoring: Utilizing automated scanning like Attack Surface Monitoring (ASM) and Dynamic Application Security Testing (DAST) to provide ongoing assessments and detect vulnerabilities between pentests. This provides a consistent, up-to-date view of your security risks. Introducing the Calendar Planner: Visualize Your Security Future Managing a comprehensive security program, with various types of tests and ongoing monitoring, can be complex. That's why Cobalt Labs, Inc. is excited to introduce the Cobalt Calendar Planner. The Calendar Planner provides a visual interface for managing your security program, enabling you to: * Gain a Holistic Overview: Visualize all your tests, including pentests, digital risk assessments, and secure code reviews, in one centralized location. * Plan and Manage Credits: Understand your required credits and current credit spending by planning your program in advance. * Streamline Future Planning: Use the quick plan test option to draft future tests or easily duplicate existing ones for upcoming planning. The Calendar Planner transforms how you manage your security initiatives, providing the clarity and control you need to confidently navigate your security journey. It turns your continuous security program into a visual roadmap, ensuring nothing slips through the cracks. Ready to gain confidence in your defenses and visualize your security future? Learn more about building an offensive security program with Cobalt and see the new Calendar Planner in action today! About Brittney Belt. As a Product Marketing Manager at Cobalt, Brittney leverages her PMM and cybersecurity expertise to translate complex technical concepts into clear, engaging narratives to showcase the value of Cobalt's pentesting and security services. She also leads the strategy for customer content, highlighting how customers partner with Cobalt to strengthen their security posture. More By Brittney Belt Related readings. Never miss a story. Stay updated about Cobalt news as it happens