Detectify

When adversaries weaponize LLMs, attack economics change overnight. @DarkReading details how threat actors turned jailbroken AI into a commercial offensive platform. Our CEO Rickard Carlsson breaks down why lowering the barrier to entry changes defense: darkreading.com/cyber-risk/hac…

.@DarkReading reports on "JadePuffer", the first fully agentic, LLM-driven ransomware attack that autonomously executed a network intrusion and extortion. Our co-founder Johan Edholm discusses how traditional incident response can't keep up with AI threats darkreading.com/cyberattacks-d…

We are proud to recognize some of the top ethical hackers from our Crowdsource community. Thanks to their research submissions, our customers can access some of the best hackers in the world: labs.detectify.com/crowdsource-co…

hey SF - Come hack yourself at #RSAC2026. Booth 4514

🚨Security Update on CVE-2025-64446 - FortiWeb authentication bypass that leads to complete WAF control. Learn how the impersonation flaw works and what steps to take now. blog.detectify.com/industry-insig…

We're now integrating real-world threat data into our AI Researcher Alfred to prioritize and generate protection against the most active CVEs, boosting security speed and relevance for all Detectify customers: blog.detectify.com/product-update…

450 automated, validated security tests created in 6 months, targeting critical threats (avg. CVSS 8.5). 70% of tests needed no manual fix. Write-up with our prompts, lessons, & build process in @detectify labs! ⤵️ labs.detectify.com/writeups/ai-ag…

With the new API Scanner, customers gain access to dynamic payloads that make every scan different. Instead of relying on static methods, the scanner uses ML to randomize and rotate payloads for each run, ensuring fresh attack simulations every time:

Methods and tools (from DNS records and IP addresses to HTTP analysis and HTML content) that practitioners can use to classify every web app and asset in their attack surface. blog.detectify.com/best-practices…

We know it is hard to ensure all essential web apps are covered with deep DAST. Which of your dozens or hundreds of web apps actually need deep testing? Which are processing user data or even have many components that attackers would target? blog.detectify.com/product-update…

Break free from the illusion of coverage! detectify.com/asset-classifi…

See the forest <i>AND</i> the trees! detectify.com/asset-classifi…

Attending #RSAC? It's finally your chance to snag some of our famous Go Hack Yourself swag. More info: detectify.com/rsac

Detectify Surface Monitoring customers can test whether they have exposed ingress NGINX admission, which enables the exploit chain for IngressNightmare (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974) blog.detectify.com/product-update…

DNS is a critical attack surface very often overlooked. Security risks exist at every level (Root, TLDs, Registrars, Providers, Zones, Software Queries). Are you protecting all levels? blog.detectify.com/best-practices…

Find out how Detectify Alfred (AI-Built vuln assessments) is working around the clock to continuously bring you the latest security research: blog.detectify.com/product-update…

Thanks @helpnetsecurity for featuring Detectify Alfred as one of the releases of the week 🎉

Detectify launches Alfred to automate CVE security testing with AI ift.tt/5vPsWGn