PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

AI Agents vs Humans: Who Wins at Web Hacking in 2026?

wiz.io | blog | #ai-security | #benchmark | #ctf | #web-security | #ai-agents | #penetration-testing | #wiz
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz and Irregular tested Claude Sonnet 4.5, GPT-5 and Gemini 2.5 Pro on 10 CTF labs from real-world hacks: agents aced directed tasks but were less effective and costlier in realistic scenarios.
Published
Collected

Related coverage

blog · wiz.io
Securing the Mission at Machine Speed: Wiz AI Agents Arrive in Wiz for Gov
Wiz AI Agents are now available in Wiz for Gov. Empower public sector teams to secure mission workloads and remediate risk at machine speed within FedRAMP High.
blog · wiz.io
Growing the WIN AI Ecosystem with Agent Integrations
Wiz MCP agent integrations now let partner AI agents pull live Wiz context—Issues, findings, attack paths—on demand from customer tenants, with the WIN partners endpoint GA for building integrations.
blog · wiz.io
Building an AI Detection Engine That Understands Agent Intent
Wiz outlines a detection pipeline that analyzes AI agent input and output telemetry to trace shifts in intent, using the OpenAI-disclosed Hugging Face breach to show what legacy tools miss.
blog · about.gitlab.com
GPT-6 Astra on GitLab: Faster runs, fewer tokens used
GitLab's internal eval of GPT-6 Astra on Duo Agent Platform: up to 43.4% faster typical runs than GPT-5.6 Sol (49.2% at p95) and 42.7% fewer tokens, traded against a lower resolution rate.
blog · vercel.com
The three types of AI bot traffic and how to handle them
Bots account for over 20% of all web traffic. A quarter of that is AI crawlers alone. But not all bots are bad. Some are key to how your site gets discovered. Learn how AI bots shape visibility and what happens if you block them.
research · nebusec.ai
Beyond the Model: Benchmarking Codex Security, Claude Security, and Nebu
Nebu benchmarks its security pipeline against Codex Security and Claude Security on 76 known bugs; with GPT-5.4 it matches the best Codex result in less time at lower cost.
Back