Bright Security detailed a dynamic application security testing (DAST) capability that detects MCP tool inventory disclosure in running LLM applications, where a user-facing assistant reveals internal…
Bright Security's AI Pentesting Module aims to close the compliance evidence gap left by annual penetration tests by providing continuous, audit-ready evidence that ties each test to the application v…
A new report argues that AI-powered API pentesting must adapt to the semantics of REST, GraphQL, and gRPC rather than treating them as interchangeable endpoints, warning that sending more payloads doe…
Bright Security's AI Pentesting Module distinguishes runtime-validated AI pentesting from legacy automated tools by emphasizing deterministic proof of exploitability, with a five-stage workflow (Disco…
A new testing guide from Bright Security argues that the riskiest part of an enterprise AI agent is not the model but the authority wrapped around it, and that security testing must cover the executio…
IBM's 2025 research found that 63% of breached organizations lacked an AI governance policy or were still developing one, and one in five reported a breach linked to shadow AI. The report highlights t…
Bright Security's DAST scanner now detects three MCP session management attacks—predictable session IDs, session ID used as authentication, and sessions not invalidated—in Model Context Protocol (MCP)…
Security researchers have identified ANSI escape sequence injection (AESI) vulnerabilities in Model Context Protocol (MCP) servers that allow attackers to hide instructions from human reviewers while …
AI-powered penetration testing dramatically improves coverage and enables continuous security assessments, but findings require runtime validation to distinguish exploitable vulnerabilities from noise…
Bright, a security company, argues that product roadmaps often miss critical signals because customer feedback, security findings, and compliance data are kept in separate silos. The company advocates…
Bright Security has introduced an AI-powered feature called Bright STAR that automates the mapping of security vulnerabilities to PCI DSS compliance requirements, addressing the operational challenge …
Automated security validation reduces application security costs by eliminating false positives and wasted engineering time, according to Bright Security. The company's Bright STAR platform validates …
Bright has launched STAR, a workflow that automatically aggregates customer metrics from multiple systems to help customer success teams prepare for reviews without manual data collection. The tool co…