Enterprises ship code continuously, while most security validation still happens in snapshots.
In this interview, Novee CEO and co-founder Ido Geffen explains what “AI penetration testing” actually means, why it’s different from automated scanning, and why it’s becoming essential as attackers adopt AI to move faster and continuously.
He then breaks down what separates best-in-class AI pentesting: operator-like reasoning across real environments, validated exploitability, and the ability to uncover business logic flaws and multi-step attack chains.
Ido covers the unique technology behind Novee’s AI penetration tester: a proprietary LLM model, built independently of “frontier” LLMs (like Claude, ChatGPT, Cursor, etc…), and consistently outperforming them at live browser exploitation tests.
Finally, he shares what buyers should demand in a live evaluation and how continuous retesting closes the loop after fixes ship.
Segment Resources:
This segment is sponsored by Novee Security.
See what your attackers already know at https://securityweekly.com/noveersac.
Show Notes: https://securityweekly.com/rsac26-1
