Blog: Rethinking Application Security | Cobalt | Reando Veshi

Cobalt Platform AI-powered offensive security platform for continuous risk mitigation. Integrations Automate workflows to remediate vulnerabilities faster. Artificial Intelligence Cobalt Sage AI is the intelligence that powers every pentest. Pricing Explore the flexible Cobalt credit model that scales to your needs. Agentic PTaaS Human-led, AI-powered pentesting that scales with your attack surface. DAST Continuously monitor web applications and APIs for vulnerabilities.

Secure every application with flexible pentesting that combines expert-led testing, autonomous validation, and actionable results.

Autonomous Pentest Fast, autonomous pentests for every release and every new threat. AI & LLM Pentest Targeted testing to protect your AI systems and models. Web Application Pentest Ensure your mission-critical applications are secure. API Pentest Identify exploits for endpoints and microservices.

Offensive Security Program Go beyond one-off pentests with continuous testing, fix validation, and strategic guidance. Continuous Pentesting Program Go beyond on-demand pentests with a continuous pentesting program. Enterprise Consolidate pentesting into a centrally managed, continuous program that scales with your business. Compliance Meet ever-evolving governance, risk, and compliance requirements with expert-led pentesting. Small Business Comprehensive pentesting to meet compliance requirements. Secure SDLC Embed proactive security practices across the entire software development lifecycle.

Resource Library Essential reading and toolkits for modern cybersecurity professionals. Blog Sharpen your skills with expert commentary and practical security advice. Demo Center Explore the features, insights, and automation that help teams deliver high-impact pentests. Customer Stories Learn how real customers benefit from the Cobalt Offensive Security Platform. Webinars & Events Live and on-demand events and training for today's most pressing security challenges. Learning Center Learn the fundamentals of offensive security and strengthen your cyber defenses. Partners Explore the Cobalt partnership network and apply to become a partner today. Newsroom Read the latest news stories and press coverage.

About Us Learn how Cobalt infuses manual security testing with speed, simplicity, and transparency. Contact Us Get in touch with a member of our team. Leadership Meet the executive leadership team driving our mission. Cobalt Core Meet the community of skilled and highly vetted pentesting experts. Careers Join Cobalt to help us redefine and reimagine offensive security. Become a Pentester Apply to join our elite community of freelance pentesters.

Reando Veshi

I am a penetration tester and occasional bug hunter. As a lover of WebSec, I always like to find something wrong and fix it. I have been passionate about computer science since childhood and have been in the security world for five and a half years. I started studying IT many years ago in school and university, where I learned JAVA and C and PHP, Python, and Javascript during my career. I’m the founder of Pentesting Made Simple, an Italian community where we speak about Pentesting, Bug Bounty, and Ethical Hacking in general.

AWAE/OSWE Preparation and Exam Guide

May 30, 2023

Est Read Time: 9 min

This blog is a personal account from Reando Veshi of preparing for and taking the OSWE (Advanced Web Attacks and Exploitation) exam. Reando shares his experience along with tips that helped him in his journey.

Cobalt Core Compliance Vulnerabilities

Common Vulnerabilities in NodeJS Applications

November 18, 2022

Est Read Time: 7 min

Node.js is an open-source and cross-platform JavaScript runtime environment. Today we are going to look at 3 different vulnerabilities by analyzing the source code of an application and how you can detect and exploit them.

Cobalt Core Vulnerabilities

Hacking Solidity Smart Contracts

Hacking Solidity Smart Contracts

August 10, 2022

Est Read Time: 8 min

Today we will look at hacking smart contracts written using the Solidity programming language. We will fix an overflow/underflow vulnerability on PWNX Academy

Vulnerabilities