Hey there,
There’s been a lot of discussion around what AI can actually find in a real application.
So we decided to test it.
We ran Astra Autonomous Pentest against the same Photoview v2.4.0 application used in Doyensec’s
benchmark and compared the results with XBOW.
The headline finding?
27 true positives vs. 7.
But the more interesting story is what those findings looked like, and where each tool had strengths and gaps.
We documented the methodology, results, false positives, and trade-offs in the full report.
Worth a read if you’re evaluating where autonomous pentesting fits into your security stack.
Read the full benchmark →
Cheers,
Shelton
Astra Security