AI in Penetration Testing: Adoption, impact and what comes next

AI is already embedded in penetration testing workflows – but adoption is uneven, expectations are shifting, and governance is becoming critical.

New global research from CREST reveals how AI is actually being used by professionals and service providers in the penetration testing lifecycle: across tools, workflows, and real-world service provision.

Download the full report to understand what’s changing – and what isn’t.

Key insights:

• AI is not replacing penetration testers: it’s reshaping how they work, and augmenting their expertise
• AI adoption is accelerating – but capability without accountability creates risk
• 47% of organisations use AI for reporting
• 44% for vulnerability scanning and enumeration
• Only 9% report using autonomous, agent-based testing

What’s inside:

✔ How AI is being used across the penetration testing lifecycle

✔ Where adoption is accelerating – and where it’s not

✔ The evolving skills required for penetration testers

✔ The role of governance, validation and accountability

✔ Regional differences in adoption and approach

✔ What this means for buyers, providers and regulators

Get the full report

Simply complete the form to download the report, understand how AI is reshaping penetration testing and what it means for your organisation.