We Let an AI Pentester Attack Our App — Here’s What It Found

We let an autonomous AI penetration testing agent run against our production application — and the results were unexpected.In this episode, we sit down with Grant McCracken from Dark Horse Security, who built Vulcan, an AI-powered pentesting agent capable of autonomously discovering vulnerabilities in real-world systems.Instead of traditional scanners or manual pentests, Vulcan ran continuously, explored the app like a human tester, and uncovered issues we hadn’t considered — including unexpected behavior in our AI workflows.We cover:How AI penetration testing actually worksWhy traditional scanners miss critical vulnerabilitiesWhat Vulcan found in our systemHow we fixed the issues it uncoveredThe future of continuous, autonomous security testingIf you're building with AI, deploying SaaS products, or working on secure infrastructure — this is a glimpse into what security will look like going forward.