Bright Security adds AI PT module for continuous penetration testing

By Atlas Watchline Staff · Corporate · September 1, 2026

Bright Security said it has added AI PT to its AI SDLC security platform, offering a module for continuous, AI-driven penetration testing of applications and APIs.

Bright Security said on Sept. 1, 2026, that it has expanded its AI SDLC security platform with AI PT, a new AI-powered penetration testing module now available as part of the company’s platform.

The company said AI PT is designed to test applications and APIs continuously. Bright said the module is built on its dynamic testing engine and is meant to find, exploit and prove vulnerabilities in a way that mirrors a human tester.

In its release, Bright cited outside claims that the time between disclosure and first exploit has fallen from about two years in 2018 to hours today. It also cited VulnCheck’s report that more than a quarter of exploited flaws are weaponized within 24 hours of going public.

Bright said the typical enterprise still runs formal penetration tests only once or twice a year and takes a median of 43 days to remediate the issues those tests uncover. The company said AI PT is intended to help teams test more often, including on every release rather than only when a tester can be scheduled.

The company also pointed to broader industry shifts in the release. It said frontier AI systems can now discover and weaponize software flaws with little human involvement, and it cited Anthropic research that reportedly used a similar system to uncover more than 500 previously unknown high-severity vulnerabilities in widely used open-source software.

Bright said the new module builds on its STAR solution, which CEO Gadi Bashvitz said the company launched in 2025. In a statement included in the release, Bashvitz said AI PT lets teams test every release, not just the ones they can schedule a tester for.

Tom, identified by Bright as vice president of product, said the module was built on the company’s discovery, authentication and centralized management platform. He said the product is intended to reduce the time it takes to detect vulnerabilities while delivering lower costs than pure AI pentesting approaches.

Bright said security teams at multiple global top-10 insurance and financial institutions already use its platform. The company described itself as an AI-native application security company based in California and said AI PT is available now.

Sources

• Bright Security press release via GlobeNewswire

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

This is the AMP version of the article. Read the full article on Atlas Watchline.