THE article discusses CREST's introduction of an AI-Enabled Penetration Testing accreditation for 10 companies, aimed at promoting responsible AI use in penetration testing services. This module, introduced in July 2026, is an addition to their existing standards, allowing firms to showcase secure AI governance to clients and regulators. Accredited companies include Closed Door Security, ImmuniWeb, JUMPSEC, and others from Europe, India, and the US.
Industry leaders like William Wright and Denis Kucinic emphasize the efficiency of AI in pentesting while insisting on responsible governance. CREST aims to transition from theory to assured, practical AI integration in cybersecurity.