Bugcrowd Launches Pathseeker: Flipping the Script on Traditional Pentesting

Pathseeker launch

Bugcrowd CTO Braden Russell describes Pathseeker, a new agentic offensive testing capability demoed at Black Hat, positioned between periodic deep pen tests and noisy volume scanners. It enables continuous, broad attack-surface assessment with validated, high-quality findings.

Human plus AI model

Russell argues AI raises the automation floor but cannot replace human creativity for zero-days, broken access control, and deployment/configuration flaws. Bugcrowd still routes agent and human findings through the same triage pipeline, with AI helping prove exploitability and reduce busy work.

Scope and guardrails

Savant Vista EASM maps what customers must protect versus where testers, bounties, and red teams operate, highlighting untested surface. That inventory serves as both targeting and guardrails so agents stay in bounds. An AI triage copilot can answer historical context and generate Nuclei templates to hunt similar issues across the estate.