Topic starter
19/08/2026 3:57 pm
TL;DR: An agentic AI pentest system solved 10 of 10 PortSwigger SQL injection labs in January 2026, with 90% completed within a standard practitioner time window and one missed by 18 seconds, according to Synack. The result shows that agentic testing can scale coverage, but human validation still matters when tool-driven systems are used to assess real attack surface.
Editorial analysis by NHI Mgmt Group, based on content published by Synack: “Benchmarking Synack’s Agentic AI Against PortSwigger SQLi Labs”.
By the numbers:
- Synack says 90% of the labs were completed within a standard practitioner time window.
- Synack says one lab was missed by just 18 seconds.
- Synack says the benchmark covered 10 labs with a total of 10 attempts.
Key questions
Q: Where does agentic pentesting fail in practice for SQL injection testing?
A: It fails when teams assume a solved lab is the same as a validated production finding.
Q: Why does blind SQL injection create a real access-risk problem?
A: Because the end state is often credential theft, not just data disclosure.
Q: How should security teams govern agentic AI in penetration testing workflows?
A: Security teams should keep agentic AI inside a bounded workflow where scope, tool access, and approval rules are enforced by the testing platform, not the model.
Practitioner guidance
- Define acceptance criteria for agentic findings Set rules for what counts as a valid, reproducible, and material vulnerability before an AI-generated result can enter remediation tracking.
- Separate discovery from adjudication Let autonomous tools explore the attack surface, but require human review before any result is used for risk acceptance, reporting, or prioritisation.
- Retest indirect-execution findings manually Treat blind SQLi and out-of-band cases as higher-governance findings because they depend on inference and can be misread by automated tooling.
Bottom line: Agentic pentesting can expand coverage quickly, but coverage alone does not prove that a finding is decision-grade or production-relevant.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
19/08/2026 4:35 pm
Agentic pentesting raises an evidence-quality problem before it raises an efficiency problem. The central governance issue is not whether an agent can produce a finding, but whether that finding is decision-grade enough to support remediation, exception handling, or executive reporting. In security programmes, proof without context can mislead as easily as it can help. Practitioners should treat agentic testing as an input to assurance, not a substitute for assurance.
A few things that frame the scale:
- 67% of organisations still rely heavily on static credentials despite the risks they pose to agentic AI deployments, according to the 2026 Infrastructure Identity Survey.
- Only 13% of organisations feel extremely prepared for the reality of agentic AI despite the majority racing toward autonomous adoption, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: What should teams do before relying on AI-generated pentest results?
A: Define a review workflow that checks reproducibility, scope, and evidence strength before any AI-generated result changes risk posture. Without that gate, teams can overstate coverage or understate uncertainty. The right control is a decision process that turns machine-assisted discovery into human-approved assurance.
👉 Read our full editorial: Agentic AI pentesting benchmarks raise new governance questions for SQLi