In full career to automate processes and gain efficiency, cybersecurity is not far behind. The tools based on artificial intelligence (AI) have begun to transform traditionally manual tasks, and among them stands out the Pentesting – the penetration tests designed to detect vulnerabilities in systems and networks. According to Gartner, the use of AI in this field has increased by 71% in the last two years. But this advance opens a new debate: can an AI equalize the expertise of a human pantiester?
From Zerod, the first marketplace specialized in White Hackers, his CEO, Víctor Ronco, provides a nuanced response: “Artificial intelligence has come to stay and offers very clear advantages in the field of Pentesting: it can detect known vulnerabilities on a large scale in a very short time and helps automate processes that previously required many hours.”
In this context, Zerod has developed Pentai, an autonomous Penteting tool promoted by AI that promises to revolutionize the way of auditing systems. With it, complete audits can be executed and documented in just 72 hours, shortening the usual deadlines up to 90%. In addition, it offers a second free test after 30 days to validate the corrections applied.
“In hybrid projects that combine AI with human analysts, we have registered an improvement of 40% in efficiency and 25% more coverage on digital assets compared to 100% manual approaches,” says Ronco. Reports generated by Pentai classify vulnerabilities by criticality level, include practical recommendations and are adapted to both technical and executive profiles.
Zerod Lanza Pentai, a tool that combines AI and expert supervision to detect vulnerabilities in record time
Success in efficiency, without forgetting depth
Despite the advantages, from Zerod they recognize that AI still has limitations. While automated analysis detects between 60% and 70% of critical vulnerabilities, at a significantly lower cost, human teams continue to exceed 90% of findings, especially in complex aspects.
“We are seeing that AI is excellent for massive scans and to find known failures. Even so, to detect business logic or more sophisticated attack vectors, the human factor remains key,” says Zerod’s CEO.
Expert supervision, added value
Pentai does not act in isolation. Each finding is reviewed and validated by the Zerod team, which guarantees that the results comply with regulations such as ISO 27001, ENS, NIS2 and methodologies recognized as OWASP and NIST. “Not only do we deliver an automated scan: we deliver professional audits ready for compliance requirements,” says Ronco.
In addition to allowing continuous surveillance over thousands of digital assets, Pentai has proven to reduce the average time of exposure to vulnerabilities by 35%, according to data collected by the company itself.
The future is hybrid
Looking ahead, from Zerod they have it clear: the most effective Pentesting will be the one that combines the best of the machine and the human. “Pentesting is changing. The best security audits today combine the speed and ability of AI with the intuition, creativity and criteria of human pentorster. Who does not understand this transition, will be left behind,” warns Víctor Ronco.
The forecasts of the sector support this trend. According to Markets & Markets, the Global Penteting Market will reach 4.5 billion dollars in 2027, with an annual growth of 13.8%. And much of that expansion will come from the hand of tools based on artificial intelligence. Of course, as the CEO of Zerod concludes: “He who wants real security cannot do without the human mind.”
