Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Blog

Ostorlab Blog

Vulnerability research, CVE deep dives and engineering write-ups from the Ostorlab team on AI pentesting and mobile, web and API security testing.

Featured Stories See all articles →

Product

Introducing Ostorlab App Vetting for the Agentic Era

Ostorlab has launched App Vetting, a mobile application risk assessment solution that helps teams evaluate Android and iOS apps before approval. It combines static analysis, dynamic testing, and secure sandbox execution with continuous monitoring, weighted risk scoring, and agentic workflows to identify vulnerabilities, privacy risks, malware indicators, telemetry behavior, and trust issues while helping teams prioritize what matters most.

Abir Jelti
Jun 16, 2026

Engineering

Building an AI PR Reviewer Engineers Actually Trust

We built an AI-powered pull request reviewer, shut it down after hallucinations and false positiv...

Jun 08, 2026

Product

Introducing Ostorlab’s Single Vulnerability Assessment and Dig Deeper

Ostorlab is launching a powerful, highly targeted AI orchestration engine accessible through two ...

Jun 02, 2026

Product

Single Vulnerability Assessment (SVA), Dig Deeper, Scan Report PDF Design Improvement & Multilanguage Support

This release introduces Single Vulnerability Assessment (SVA) for targeted validation, Dig Deeper...

Jun 01, 2026

Read by Topic

Latest from Engineering, Product & Security
Engineering
View all Engineering →

The True Cost of False Positives: Calculating the Engineering Tax of Noisy Scanners

False positives are an engineering-capacity problem, not only a scanner-quality problem. Learn how to measu...

Sep 28, 2026

When Does an AI Scanner Become an AI Pentest?

Learn what separates AI-powered scanning from AI pentesting and how Ostorlab Deep Agentic Scan follows evid...

Jul 22, 2026

Source Code Security: From Signal to Validated Risk | Ostorlab

Learn how source code security testing works, why traditional SAST creates false positives, and how agentic...

Jul 16, 2026
Product
View all Product →

Snyk and Checkmarx Alternatives: Ostorlab vs Snyk Code, Checkmarx One and GitHub Advanced Security (2026)

The best Snyk Code, Checkmarx One and GitHub Advanced Security alternatives for SAST in 2026, and how Ostor...

Oct 07, 2026

We Built an AI Agent for Our Own Backlog. Now It's Yours.

How a small agent that turned bug tickets into pull requests became Ostorlab's ticket agent: an AI teammate...

Oct 06, 2026

Who Should Use Ostorlab? Best-Fit Teams, Use Cases, and When to Choose Something Else

Ostorlab fits teams testing connected mobile, web, API, and code assets on every release. Where it fits, wh...

Sep 28, 2026
Security
View all Security →

Ostorlab vs MobSF: Analyst-Driven vs AI-Driven Mobile Security Testing (2026)

Ostorlab vs MobSF (Mobile Security Framework) for mobile app security testing: static and dynamic analysis,...

Oct 07, 2026

Ostorlab vs Oversecured: Mobile App Security Testing Compared (2026)

Ostorlab vs Oversecured for mobile app security testing: iOS and Android coverage, exploit proof, authentic...

Oct 07, 2026

Ostorlab vs. Pentesting Firms: 2026 Cost & Depth Comparison

Ostorlab vs. pentesting firms: cost, testing frequency, depth and remediation, and when to use AI pentests,...

Sep 25, 2026

Changelog

View all changes

New Dashboard UI, On-Premises Scanner, Agentic Scan Knowledge, Multi-Asset Scanning, Linear & MCP Integrations, and New Model Support

 Sep 02, 2026

App Vetting, Scan Coverage Heatmap, Mobile Shielding Scan, Deep Agentic Scan Improvements, Cyber Models & Source Code Scanning

 Jul 07, 2026

Single Vulnerability Assessment (SVA), Dig Deeper, Scan Report PDF Design Improvement & Multilanguage Support

 Jun 01, 2026

Deep Agentic Scan (BYOK), New CI Integrations, Scan Filters & Performance

 Mar 27, 2026