Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Blog

Ostorlab Blog

Vulnerability research, CVE deep dives and engineering write-ups from the Ostorlab team on AI pentesting and mobile, web and API security testing.

Featured Stories See all articles →

Product

From Random to Intelligent: How AI-Powered Monkey Testing Achieves 10x Mobile App Coverage

Ostorlab’s AI Monkey Tester transforms mobile app security testing by using natural language prompts and generative AI to automatically generate intelligent, context-aware test scenarios, resulting in up to a 10x increase in application coverage compared to traditional, rule-based testing approaches.

Ostorlab Team
Aug 01, 2025

Security

Automating Security Research: AI Engine Exploits Zulip Stored XSS (CVE-2025-52559)

This article presents a thorough, hands-on analysis and proof of concept for exploiting the store...

Jul 28, 2025

Product

SSL Scanner Overhaul and Improved UI Call Coverage Powered by User-Defined Prompts

This release introduces major enhancements to our AI-powered UI exploration engine, delivering sm...

Jul 22, 2025

Product

Know Your App's Data Habits: A Deep Dive into Our Comprehensive Privacy Analysis

Ostorlab's Privacy Scan automatically detects mismatches between what your app's privacy policy s...

May 27, 2025

Read by Topic

Latest from Engineering, Product & Security
Engineering
View all Engineering →

The True Cost of False Positives: Calculating the Engineering Tax of Noisy Scanners

False positives are an engineering-capacity problem, not only a scanner-quality problem. Learn how to measu...

Sep 28, 2026

When Does an AI Scanner Become an AI Pentest?

Learn what separates AI-powered scanning from AI pentesting and how Ostorlab Deep Agentic Scan follows evid...

Jul 22, 2026

Source Code Security: From Signal to Validated Risk | Ostorlab

Learn how source code security testing works, why traditional SAST creates false positives, and how agentic...

Jul 16, 2026
Product
View all Product →

Ostorlab vs. Manual Pentesting: More Critical Findings, Less Time, Lower Cost

Ostorlab reports more critical findings, shorter testing time, and assessment costs of one-tenth to one-for...

Oct 28, 2026

How to Vet a Third-Party Mobile App Before You Allow It in Your Company

A five-step mobile app vetting checklist for security teams (permissions, trackers, malware, data flows, st...

Oct 27, 2026

Precheck: Know Your Mobile Scan Will Work Before It Runs for Hours

Precheck verifies that a mobile app installs, launches, logs in and runs its UI prompts on a real device. W...

Oct 27, 2026
Security
View all Security →

Ostorlab vs MobSF: Analyst-Driven vs AI-Driven Mobile Security Testing (2026)

Ostorlab vs MobSF (Mobile Security Framework) for mobile app security testing: static and dynamic analysis,...

Oct 07, 2026

Ostorlab vs Oversecured: Mobile App Security Testing Compared (2026)

Ostorlab vs Oversecured for mobile app security testing: iOS and Android coverage, exploit proof, authentic...

Oct 07, 2026

Ostorlab vs. Pentesting Firms: 2026 Cost & Depth Comparison

Ostorlab vs. pentesting firms: cost, testing frequency, depth and remediation, and when to use AI pentests,...

Sep 25, 2026

Changelog

View all changes

Late October 2026: Cloud Inventory, Scheduled Testing and Investigation Replay

 Oct 31, 2026

October 2026: From Security Findings to Tested Fixes

 Oct 17, 2026

New Dashboard UI, On-Premises Scanner, Agentic Scan Knowledge, Multi-Asset Scanning, Linear & MCP Integrations, and New Model Support

 Sep 02, 2026

App Vetting, Scan Coverage Heatmap, Mobile Shielding Scan, Deep Agentic Scan Improvements, Cyber Models & Source Code Scanning

 Jul 07, 2026