PortSwigger

PortSwigger is a cybersecurity company best known for developing Burp Suite, a widely-used web application security testing platform. In the context of AI governance, PortSwigger's tools help organizations identify and remediate security vulnerabilities in AI systems and the APIs that support them. This capability matters for compliance because securing the technical infrastructure around AI deployments is essential to meeting regulatory requirements and preventing data breaches that could compromise model integrity or user privacy.

1 item

ResearchGlobal2026-08-11

30,000 AI-Generated Attack Vectors Reframe Enterprise Red-Teaming Governance

PortSwigger researcher James Kettle published research on HTTP Terminator, a human-guided AI system that autonomously generated and tested 30,000 HTTP desync attack vectors, identifying 700 vulnerable targets including financial institutions and government infrastructure. The system discovered a novel vulnerability class called shared-parser confusion that neither the human operator nor the AI could have found independently. The research challenges fully autonomous AI security models and argues for a human-amplified approach with deterministic code-level controls.

PortSwigger red teaming penetration testing human-in-the-loop vulnerability disclosure AI security research enterprise risk