If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would.

That promise is worth taking seriously. It’s also worth pressure testing, and three questions do the heavy lifting.

What can the assessment actually