Exposure Management
5 Min

NetSentries Announces General Availability of AI-Augmented Security Testing

NetSentries today announced the general availability of AI-augmented security testing capabilities across its expert-led targeted security assessments and within the Adversarial Exposure Validation (AEV) workflow of its NST Assure CTEM platform. These capabilities apply AI-assisted analysis within a strictly governed Human in the Loop (HITL) operating model, accelerating validation of real-world exposures while preserving expert oversight, accountability, and customer control.

As part of this release, NetSentries applies commercially available frontier AI models, including various Claude models, within controlled security assessment environments to enhance reasoning, scale, exploit development, and coverage. All scoping, validation, severity determination, and reporting decisions remain the responsibility of NetSentries security professionals.

Recent advances in AI reasoning and automation have increased the speed at which weaknesses can be analyzed across complex environments. NetSentries is applying these advances responsibly to help organizations identify, validate, and remediate exploitable exposures ahead of increasingly automated and AI-assisted threats.

“By applying AI-assisted analysis within NST Assure’s AEV workflows and our targeted security assessments, while retaining full HITL governance, we now validate exposures more efficiently without compromising safety or accountability. This ensures findings remain auditable, defensible, and actionable.”
Arun Thomas, CTO and Co-Founder, NetSentries

What this means for customers

NST Assure already applies AI-assisted techniques across exposure discovery, vulnerability analysis, prioritization, and vulnerability intelligence. This new AI-assisted HITL testing enhancement within the AEV module enables controlled validation of selected exposures while preserving a Human-in-the-Loop delivery model. Customers receive faster confirmation on whether a vulnerability can be exploited and clearer advice on what to fix first, based on real risks, with early use showing significant reductions in validation time while still keeping oversight and the ability to audit.

May 15, 2026

AI-augmented workflows will be available for targeted external zero-knowledge security assessments, subject to customer approval and engagement scoping.

Governance First

Credentialed and gray-box assessments will follow under the same governance model and with explicit customer consent. Final findings are issued only after human validation.

NetSentries is also applying AI-assisted techniques to strengthen secure code review and application assurance, supporting identification of complex logic flaws and insecure patterns while keeping remediation guidance expert-led and context-aware.

Human expertise is amplified rather than replaced.

Every AI-assisted exploitation validation runs in semi-autonomous mode with a HITL process. Expert security assessors from the NetSentries Security Assessment Team scope the engagement, validate every finding, and own all recommendations that appear in the customer deliverables.

Controlled evolution of AI-augmented capabilities

The NST Assure platform is designed to continuously absorb additional AI-assisted capabilities under strict Human-in-the-Loop controls. Future enhancements include:

  • Adoption of newer frontier reasoning models as they mature.
  • Security-specialized AI models, including Mythos-class frontier systems when commercially available, to assist advanced code and vulnerability analysis within governed testing environments.
  • Multi-agent orchestration engines are needed to scale the continuous assessment of AEVs under HITL governance.
  • AI-augmented credentialed and grey-box assessments, enabled under explicit customer consent.

Data and Governance

Customer data is not used to train any AI model. All AI-assisted activity is logged and governed under internal controls, including access boundaries, usage limits, and acceptable use enforcement.

About NetSentries

NetSentries is a global provider of offensive security assessment services to banks, financial institutions, and large enterprises across the world. Its flagship platform, NST Assure, delivers AI-driven Continuous Threat Exposure Management through External Exposure Discovery and Adversarial Exposure Validation.

Related posts

BLOG
Exposure Management

Email Security Controls: Levels of Security & Preventable Attack Scenarios

Over the last few weeks, we have received numerous support requests from our enterprise customers and had interactions with teams regarding early notification alerts sent from our side about their application servers' susceptibility to the HTTP 2 Rapid Reset DDoS attack. It was interesting to listen to the Blue team's stance and views on the shared responsibility aspect of DDoS mitigation. There is a widespread misbelief that any single-layer protection, whether at the ISP level or gateway, offers adequate defense against all types of DDoS attacks. Most large enterprises have multi-disciplinary, defense-in-depth practices in place to prevent such attacks. Nonetheless, it was notable that we were able to demonstrate the actual impact to customers with meaningful proof of concepts (POCs) despite the presence of many such security solutions. While the most favored and recommended method of remediation is the actual patching of the application server, there may be issues related to application compatibility or other factors that could delay this action. Therefore, it is crucial to verify the presence and effectiveness of security controls at various levels to establish a virtual patching defense for the affected application servers. A multi-layered DDoS defense strategy integrates measures from ISPs, WAFs/WAAPs, CDNs, ALBs, SLBs, and Application Servers to provide comprehensive protection

See NST Assure in action! Contact us for a Demo

email us : info@nstcyber.ai
Proactively predict, validate & mitigate risks