Escape - Application Security & Offensive Security Blog
Explore practical offensive and application security insights covering web application testing, emerging AI cybersecurity research, API and GraphQL security, and advanced testing techniques.
Filters
Offensive Security
Penetration testing as a service (PTaaS), explained
Penetration testing as a service (PTaaS) made buying a pentest almost frictionless. You scope it in a portal, watch findings land on a live dashboard, and click a button to retest the fix, all without a single procurement call. But the test still runs on a schedule, so weeks after
10 min read
Announcement
Escape joins Anthropic’s Cyber Verification Program to advance AI-powered offensive security
Good news doesn't arrive alone. This month we joined not one frontier AI program but two! Yesterday we shared that Escape joined OpenAI's Trusted Access for Cyber. Today we're a verified member of Anthropic's Cyber Verification Program.
Both programs solve the same
2 min read
Announcement
Escape joins OpenAI’s Trusted Access for Cyber (TAC) to advance AI-powered offensive security
We've been approved for OpenAI's Trusted Access for Cyber preview.
For years we've been building toward one idea: offensive security that runs continuously inside engineering, instead of arriving twice a year as a PDF nobody reads past the executive summary. Business-logic DAST first, then
4 min read
Research
Escape Research team found a PII disclosure in Keycloak. It's now CVE-2026-17059.
Keycloak filters its main users list so a restricted admin sees nothing. The endpoint that lists a role's members skips that filter and hands the same account everyone's email and name. Escape research found it, reported it, and it's now tracked as CVE-2026-17059.
10 min read
Research
Why does the rise of Agentic AI force security teams to become research-aware?
Bruce Schneier : "security is a process, not a product".
It’s not enough to audit your application once, every new feature introduces new attack surfaces that must be taken into account when evaluating the security of the application as a whole. For example, a company rolling out a
8 min read
Product updates
wp2shell (CVE-2026-63030 + CVE-2026-60137): WordPress pre-auth RCE, now detected by Escape
wp2shell is an unauthenticated RCE chain in WordPress core. It combines two separate vulnerabilities: CVE-2026-63030 and CVE-2026-60137. Escape detects it across DAST and AI Pentesting, confirms exploitability, and shows affected assets within its Attack Surface Management.
7 min read
DAST
Best AI DAST tools in 2026: ranked, compared, and reviewed for enterprise security teams
Every DAST vendor put "AI" on the homepage this year. The word now means ten different things to different tools, and even when discussing with analysts, they mention they give an "AI" badge when a certain capability checks the box. This is our attempt to fix
20 min read
Product updates
Fix issues with a prompt built for your coding agent
There's a translation step between a security finding and a fix, and it's usually done by hand.
Someone opens the issue, reads the description, checks the CVSS score, follows the link to the affected asset, works out which endpoint is actually involved, then writes all of
2 min read
AI pentesting
Modern AI-powered Pentesting Tools In-Depth benchmark
If you're evaluating AI for offensive security right now, you're weighing two questions at once. The first: why not skip the tooling and point a frontier model at your apps yourself? The second: among the AI pentesting tools you could actually buy, which one earns the
15 min read
AI pentesting
Two Critical Vulnerabilities, One AI Pentester: How Cascade Found an Unauthenticated RCE and Walked Around the WAF
TL;DR
We pointed Cascade, Escape's AI pentesting solution, at a single Spring + JSP customer portal. It came back with two findings that are typically difficult for traditional Dynamic Application Security Testing (DAST) scanners to detect:
* Unauthenticated RCE via SpEL injection. A ref request parameter was dropped, unsanitized,
11 min read
Case Study
How Escape helped Bridgetech Group replace pentests with automated evidence
Security scanning that doesn't feel like going to the dentist. See how Bridgetech Group uses Escape for authenticated security testing and API scanning, replacing costly manual pentests with customer-ready security evidence for ISO 27001 and enterprise procurement.
6 min read
AI pentesting
Introducing Cascade: the multi-agent penetration testing that becomes an expert in your business
Escape CASCADE allows you to run deep, human-grade assessments across your whole attack surface, proves every finding with a working exploit, and gets more expert in your business with every engagement.
15 min read
Don’t let your vulnerabilities escape.
Ready to multiply your force, not just noise?
Book a demo
Book a demo