Sprocket Security Unveils Apex AI Penetration Testing Agent

On June 30, 2026, Sprocket Security launched Apex, its first AI-powered penetration testing agent designed for continuous vulnerability discovery in web applications. Apex autonomously conducts context-aware, unauthenticated testing, identifying exploitable vulnerabilities at machine speed. It integrates with Sprocket's attack surface management platform, utilizing a customer's historical data to enhance testing accuracy. Each finding is validated by human testers to ensure quality and relevance. Apex targets the OWASP Top 10 vulnerabilities and generates an Attack Narrative for each test run. The agent operates under a zero-data-retention policy, ensuring customer data is not used for model training. Additional AI agents are expected to be released throughout 2026.

Key Points: • Apex is Sprocket Security's first AI penetration testing agent, launched on June 30, 2026. • The agent performs autonomous, context-aware testing to identify vulnerabilities in web applications. • Human testers validate all findings to ensure quality and actionable insights for security teams.