#owasp
-
In Agentic Pentesting, the Harness Beats the Model
A model can write the attacks against your web app on its own. But what makes them safe to run against production, and worth acting on afterward, lives in the deterministic harness around the model — not in the model itself.