The numbers in the new guide paint a familiar but uncomfortable picture. Mandiant data cited in the guide says attackers can weaponize a fresh vulnerability in roughly five days. Verizon's DBIR 2026 puts the median organization's patch time at 43 days. That leaves a wide window of exposure.
The guide, aimed at CISOs, argues that autonomous AI agents can close much of that gap. It describes agentic pentesting as a way to continuously probe websites and validate whether security controls actually hold up. The guide is free, and it frames the technology as something security leaders need to evaluate rather than wait on.
Because there is only one source, there is no second opinion to compare against. The significance is in the framing: agentic pentesting is presented not as an experimental tool but as a practical answer to a measured asymmetry between attackers and defenders.