[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT2rjH9Fdo7GazWBTn7p_gWI6qBcuM4Lofl335X9pAqg":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":128},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"7d89fe0f-42f4-4ffe-8eb2-f897aa7a7ed6","Aikido launches external network pentesting","aikido-launches-external-network-pentesting-0a42b2","Aikido launches external network pentesting: AI agents attack your internet-facing systems from the outside and report only findings they actually exploit. Category: Company Updates","Aikido has introduced a new external network pentesting service that utilizes AI agents to simulate real-world attacks on internet-facing systems. The service aims to identify and exploit vulnerabilities before malicious actors can, offering a proactive approach to perimeter security in an era of rapid exploitation.","Aikido launches AI-powered external network pentesting service.","https:\u002F\u002Fwww.aikido.dev\u002Fblog\u002Faikido-launches-external-network-pentesting","https:\u002F\u002Fcdn.prod.website-files.com\u002F642adcaf364024654c71df23\u002F6ae05c060da6f1a675f53f35_Aikido-launches-agentic-external-network-pentesting_Feature.jpg","2026-10-28T10:00:00+00:00","2026-10-28T10:00:12.233983+00:00",7,[17,20,23],{"name":18,"type":19},"Aikido","vendor",{"name":21,"type":22},"AI agents","technology",{"name":24,"type":22},"pentesting","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":25,"icon":27,"name":28,"slug":29},null,"Tools","tools",[31,33,38],{"category":32},{"id":25,"icon":27,"name":28,"slug":29},{"category":34},{"id":35,"icon":27,"name":36,"slug":37},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":39},{"id":40,"icon":27,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":46,"vendors":127},[47,76,98],{"slug":48,"name":49,"problem":50,"products":51},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":77,"name":78,"problem":79,"products":80},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[81,82,90],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xpanse","Cortex Xpanse","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xpanse","External attack surface discovery and remediation.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"censys","Censys","\u002Fvendor-logos\u002Fcensys.png","censys-external-exposure-management","Censys External Exposure Management","https:\u002F\u002Fcensys.com\u002Fsolutions\u002Fexternal-exposure-management","External attack surface discovery based on continuous internet-wide scanning.",{"slug":99,"name":100,"problem":101,"products":102},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",[103,111,119],{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"horizon3-ai","Horizon3.ai","\u002Fvendor-logos\u002Fhorizon3-ai.png","nodezero","NodeZero","https:\u002F\u002Fhorizon3.ai\u002Fnodezero\u002F","Continuous autonomous penetration testing of internal and external networks, cloud, Kubernetes and web applications, showing which attack paths work and checking that fixes hold.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"picus-security","Picus Security","\u002Fvendor-logos\u002Fpicus-security.png","picus-breach-and-attack-simulation","Picus Breach and Attack Simulation","https:\u002F\u002Fwww.picussecurity.com\u002Fplatform\u002Fbreach-and-attack-simulation","Continuously tests live defences against current threats, shows what controls block, detect, log and miss, and provides ready-to-apply fixes.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"attackiq","AttackIQ","\u002Fvendor-logos\u002Fattackiq.png","attackiq-enterprise","AttackIQ Enterprise","https:\u002F\u002Fwww.attackiq.com\u002Fproducts\u002Fenterprise\u002F","Continuous, automated adversary emulation across the environment, with full control over scenarios and schedules.",[],{"slug":129,"title":130,"body":131,"framework_refs":132,"framework_notes":140},"ai-driven-external-pentesting-highlights-need-for-proactive-perimeter-security","AI-Driven External Pentesting Highlights Need for Proactive Perimeter Security","The launch of Aikido's AI-powered external network pentesting service underscores a critical reality: internet-facing systems are continuously targeted by attackers who exploit vulnerabilities faster than most organizations can patch them. Many organizations lack consistent visibility into their external attack surface, leaving exposed services, misconfigurations, and unpatched systems undetected until it is too late. Proactive simulation of real-world attacks—before malicious actors strike—is no longer optional but a foundational element of modern security posture. The rapid exploitation window between vulnerability disclosure and active attack campaigns makes continuous, automated assessments of perimeter assets essential.",[133,134,135,136,137,138,139],"CIS Control 7: Continuous Vulnerability Management","CIS Control 18: Penetration Testing","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIS2 Article 21(2)(b)","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control",{"NIS2 Article 21(2)(b)":141,"CIS Control 18: Penetration Testing":142,"NIST SP 800-53 SI-2: Flaw Remediation":143,"OWASP A06:2021 Vulnerable and Outdated Components":144,"CIS Control 7: Continuous Vulnerability Management":145,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":146,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":147},"NIS2 requires essential and important entities to implement incident handling and proactive risk management measures, including vulnerability testing of network-facing infrastructure, aligning directly with the purpose of external pentesting.","This control explicitly requires organizations to conduct periodic external penetration tests to identify exploitable weaknesses in perimeter systems, which is precisely the gap Aikido's service targets.","SI-2 mandates that organizations identify, report, and correct information system flaws on a timely basis, which is the core preventive action that proactive external pentesting helps enforce.","External-facing systems running vulnerable or outdated components are a primary target for rapid exploitation, and Aikido's service is designed to identify exactly these kinds of weaknesses before attackers leverage them.","Regularly scanning internet-facing systems for vulnerabilities and remediating them on a defined schedule directly addresses the exploitation risk that Aikido's pentesting service is designed to expose before attackers do.","This control requires organizations to obtain timely information about technical vulnerabilities in internet-facing systems and take appropriate measures, making external attack surface assessments a compliance necessity.","Ensuring that only authorized and hardened services are exposed on the network perimeter—a key finding category in external pentests—is foundational to the protective access controls this framework item mandates."]