Skip to content

// GLOSSARY

AI-assisted Offensive Workflow

The use of human-supervised AI by the penetration-test and Red Team team across discovery, hypothesis generation, evidence handling, reporting and re-test flows; it is the backbone of the AI for Pentest & Red Team service. Separating two common misunderstandings from the start clarifies the concept. First: this is not a test sold to an external customer but an internal leverage that raises the team's own productivity; AI here is a tool, not a product. Second and more important: this is not a fully autonomous attack agent. The concept's entire design draws a deliberate boundary between itself and the fear of 'AI running an attack on its own'. AI takes on the speed-providing side: it scans thousands of log lines, generates hypotheses about likely attack paths, accelerates repetitive evidence-handling tasks, prepares report drafts. But the decision and the responsibility are always carried by a human; the approval model and human-in-the-loop gates stand in front of every step that touches the target. This distinction is both a legal and an ethical necessity: the consequences of a step taken in a penetration test can be borne by an authorized expert, not by software. Observability makes every step of the process accountable. AI generates hypotheses, the human decides.

Often confused

The Generative AI Red Team is the customer product being tested; this service is the internal workflow being improved. They are not the same.