Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The beast needs a cage: What's next for AppSec post-Mythos

portswigger.net | blog | #ai-security | #appsec | #burp-suite | #automation | #llm | #portswigger | #dafydd-stuttard

Summary

Dafydd Stuttard reflects on Mythos-class AI for AppSec: model capability gaps will close, but non-determinism means responsible automation still needs guardrails, reproducibility, and audit trails.
Published
Collected

original ↗

Related coverage

  1. When to use SAST versus an LLM security scanner (about.gitlab.com)
  2. AI Application Security Testing: The Authorisation Boundary (borghq.io)
  3. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  4. Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  5. From capable AI models to trusted security testing (portswigger.net)
  6. Introducing Burp AT: agentic AI, built on two decades of Burp Suite (portswigger.net)

back