CISO’s Expert Guide to Agentic Pentesting for Websites

CISO's Expert Guide to Agentic Pentesting for Websites The Hacker NewsSep 17, 2026Application Security / AI Agent Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR 2026). A new free guide explains how autonomous AI agents are closing that gap, and what security leaders must demand before pointing one at production. TL;DR Exploitation is now the front door. It starts 31% of breaches (Verizon DBIR 2026), the #1 initial-access vector, while annual pentesting leaves an estimated 90% of the estate untested.The capability is proven, not projected. An autonomous system topped HackerOne's US leaderboard in 2025 (XBOW), and peer-reviewed agents exploited 87% of one-day flaws…