GMO Flatt Security to Launch AI-Driven Penetration Testing Service

GMO Flatt Security, a cybersecurity firm within the GMO Internet Group, will launch its AI-driven penetration testing service, Unauthorized Access Surprise Test byGMO, on October 21. The service will cost 980,000 yen, excluding tax, for bookings made by December 31. Unauthorized Access Surprise Test byGMO will target an entire company to verify whether unauthorized access is possible from an attacker's perspective. The service will explore public assets and target all found assets, including those not known to the company, to conduct a wide-ranging verification. AI will employ various attack methods to attempt intrusion, enabling a multi-faceted and high-precision risk assessment. The service will not be limited to testing individual applications based on vulnerability diagnoses or following predefined scenarios.

Instead, it will attempt unauthorized access across the entire company, similar to how an attacker would operate. Security engineers from GMO Flatt Security will direct AI agents to aim for the theft of personal information or corporate data, and system control. They will conduct attacks from an external perspective without prior knowledge. Users need only provide a list of domains they want to include in the test. GMO Flatt Security will use these domains as a starting point to identify public assets on the internet, employing Attack Surface Management techniques. All approved assets will be targeted for attack over a 30-day period, during which surprise tests will be conducted. The tests will cover from the network layer to the application layer, exploiting known software vulnerabilities and discovering and exploiting new vulnerabilities.