Agentic Offensive Testing Should Learn the Application Before Testing

Summary

The speaker says agentic offensive testing should first learn how an application works, helping identify unintended behavior and validate whether suspected business-logic flaws are real.

Key points

• The speaker describes a “targeted attack model” that learns the application before testing begins.
• Understanding the application helps testers identify unintended behavior and assess whether suspected business-logic flaws are genuine.
• The speaker says application knowledge helps researchers form better questions and validate the answers they receive.