Sprocket Security launches Link for authenticated AI testing of web apps and APIs

Sprocket Security says Link is available to certain customers for authenticated testing of web applications and APIs, alongside its earlier Apex agent.
Sprocket Security says it has launched Link, an authenticated AI penetration testing agent for web applications and APIs, and that the tool is available now to certain customers who provide testing scope and credentials.
The company said the release expands its AI testing lineup beyond Apex, which it introduced earlier this summer to examine unauthenticated external attack surfaces. Sprocket said the two agents together are meant to give customers coverage of both what can be reached from the outside and what can happen after a user logs in.
Link is designed to answer a specific security question: what a user with valid login credentials can do that they should not be able to do. Founder and CEO Casey Cammilleri said in the release that Link logs in and holds every credentialed role simultaneously, which he said allows it to prove cross-role access issues rather than only suspect them.
Cammilleri said Apex reasoned through applications from the outside, while Link moves that reasoning behind the login. He said the two agents together provide customers with full agentic coverage of web applications and APIs, supervised by Sprocket’s expert testers.
Availability is limited to Sprocket Security customers who have added web application testing to their scope and have provided credentials for the roles they want tested. The release said interested organizations can request a demo.
The company also said it was named in GigaOm and Gartner reports this year. The release did not include further details about those reports.
PR Newswire dated the release Aug. 17, 2026, and identified Madison, Wisconsin, as the dateline.
Sources
Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.
View the Web StoryA visual, tap-through version of this reportThis is the AMP version of the article. Read the full article on Atlas Watchline.