---
id: 2452
title: "How does AI pentesting work with compliance?"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/ai-pentesting-compliance"
published_at: "2026-03-09 00:00"
tags: ["ai-security", "compliance", "pci-dss", "ai-pentesting", "iso-27001", "auditing", "soc-2"]
phying_url: "https://phying.com/item/2452"
lang: en
---

# How does AI pentesting work with compliance?

## Summary

SOC 2 and ISO 27001 require pentest coverage and documentation, not a human tester. Aikido explains when AI pentesting satisfies auditors and where PCI DSS's 'manual endeavor' wording complicates it.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-03-09 00:00
- **Original:** https://www.aikido.dev/blog/ai-pentesting-compliance
- **Phying News:** https://phying.com/item/2452