---
id: 215
title: "The beast needs a cage: What's next for AppSec post-Mythos"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/the-beast-needs-a-cage-whats-next-for-appsec-post-mythos"
published_at: "2026-05-12 14:18"
tags: ["ai-security", "appsec", "burp-suite", "automation", "llm", "portswigger", "dafydd-stuttard"]
phying_url: "https://phying.com/item/215"
lang: en
---

# The beast needs a cage: What's next for AppSec post-Mythos

## Summary

Dafydd Stuttard reflects on Mythos-class AI for AppSec: model capability gaps will close, but non-determinism means responsible automation still needs guardrails, reproducibility, and audit trails.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2026-05-12 14:18
- **Original:** https://portswigger.net/blog/the-beast-needs-a-cage-whats-next-for-appsec-post-mythos
- **Phying News:** https://phying.com/item/215