Skip to content
NewA calmer, faster ZeroHour
Toolsinfo

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

The Hacker News ()7 min read5 · 1 read
AI summary · glm-5.3Summaries by Vani AI

CTF.ae's XRanges for AI platform scores autonomous security agents on realistic instrumented targets using coverage, boundaries, exploited, and integrity signals.

XRanges for AI, built by CTF.ae, is an evaluation platform for autonomous pentesting and bug-bounty agents. It deploys realistic multi-service target applications containing 20 or more injected vulnerabilities, including zero-days from CTF.ae researchers, instrumented with hand-written OpenTelemetry telemetry. Each run is scored live on four independent signals: coverage of business actions, rules-of-engagement boundaries, exploited vulnerability kill chains, and target integrity. Deployments spin up in about 90 seconds and up to 1,000 can run concurrently.

Key facts
  • Scores agents on coverage, boundaries, exploited chains, and target integrity.
  • Targets contain 20+ injected vulnerabilities absent from public training corpora.
  • Up to 1,000 concurrent deployments; each target spins up in ~90 seconds.
  • Aimed at teams benchmarking autonomous pentesting and bug-bounty agents.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

7 min read at thehackernews.com

Autonomous security agents are getting good at finding bugs. Nobody has a good way to measure how good. Point one at a realistic target and what comes back is a report the agent wrote about itself: confident prose, a list of findings, and no way to tell which of them happened.

The Hacker News

thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.