Cobalt Platform AI-powered offensive security platform for continuous risk mitigation Integrations Automate workflows to remediate vulnerabilities faster Artificial Intelligence Cobalt Sage AI is the intelligence that powers every pentest Pricing Explore the flexible Cobalt credit model that scales to your needs Agentic PTaaS Human-led, AI-powered pentesting that scales with your attack surface DAST Continuously monitor web applications and APIs for vulnerabilities

Secure every application with flexible pentesting that combines expert-led testing, autonomous validation, and actionable results

Autonomous Pentest Fast, autonomous pentests for every release and every new threat AI & LLM Pentest Targeted testing to protect your AI systems and models Web Application Pentest Ensure your mission-critical applications are secure API Pentest Identify exploits for endpoints and microservices Mobile Pentest Find real risk in iOS and Android apps before attackers do

Offensive Security Program Go beyond one-off pentests with continuous testing, fix validation, and strategic guidance Continuous Pentesting Program Go beyond on-demand pentests with a continuous pentesting program Enterprise Consolidate pentesting into a centrally managed, continuous program that scales with your business Compliance Meet ever-evolving governance, risk, and compliance requirements with expert-led pentesting Small Business Comprehensive pentesting to meet compliance requirements Secure SDLC Embed proactive security practices across the entire software development lifecycle

Resource Library Essential reading and toolkits for modern cybersecurity professionals Blog Sharpen your skills with expert commentary and practical security advice Demo Center Explore the features, insights, and automation that help teams deliver high-impact pentests Customer Stories Learn how real customers benefit from the Cobalt Offensive Security Platform Webinars & Events Live and on-demand events and training for today's most pressing security challenges Learning Center Learn the fundamentals of offensive security and strengthen your cyber defenses Partners Explore the Cobalt partnership network and apply to become a partner today Newsroom Read the latest news stories and press coverage

About Us Learn how Cobalt infuses manual security testing with speed, simplicity, and transparency Contact Us Get in touch with a member of our team Leadership Meet the executive leadership team driving our mission Cobalt Core Meet the community of skilled and highly vetted pentesting experts Careers Join Cobalt to help us redefine and reimagine offensive security Become a Pentester Apply to join our elite community of freelance pentesters

Cobalt Core (21)

Bypassing the protections with MFA Bypass Techniques cover image

Bypassing the Protections — MFA Bypass Techniques for the Win

January 27, 2021

Est Read Time: 6 min

Multi-Factor Authentication (MFA) often known as Two-Factor Authentication (2FA) is an added layer of protection added...

Cobalt Core

Code injection cover image

A Pentester’s Guide to Code Injection

January 8, 2021

Est Read Time: 3 min

Learn about code injection vulnerabilities with the Pentester’s Guide to Code Injection.

Cobalt Core

Exploring Valuable Pentester Traits: Top Cobalt Core Pentesters of 2020

December 30, 2020

Est Read Time: 3 min

Each year we survey the Cobalt Core, our pentester community, to hear who they enjoyed working with the most. We like...

Cobalt Core

Server side template injection cover image

A Pentester's Guide to Server Side Template Injection (SSTI)

December 24, 2020

Est Read Time: 3 min

Server-side template injection is a vulnerability where the attacker injects malicious input into a template to execute commands on the server-side.

Cobalt Core

A Pentester’s Guide to Command Injection

December 11, 2020

Est Read Time: 3 min

Get expert insights with a command injection tutorial with insights from pentesting experts at Cobalt, a Pentest as a Service (PtaaS) provider.

Cobalt Core

Join the world’s most collaborative pentester community

November 30, 2020

Est Read Time: 3 min

What is the Cobalt Core? The Cobalt Core is our exclusive and private community of pentesters. They are the driving...

Cobalt Core

How to Execute an XML External Entity Injection (XXE)

November 26, 2020

Est Read Time: 4 min

What's XXE? An XML External Entity vulnerability is a type of attack against an application that parses XML input. This...

Cobalt Core

Pentester Spotlight: Stefan Nicula

November 23, 2020

Est Read Time: 6 min

Stefan Nicula is a threat researcher and pentester with over 5 years of experience. His areas of expertise are in...

Cobalt Core

A Pentester’s Guide to Cross-Site Request Forgery (CSRF)

November 13, 2020

Est Read Time: 4 min

Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application...

Cobalt Core

19 20 21 22 23