World
Technology
FireCompass AI Agent Reaches Top 3 on HackerOne, Signalling a New Era of AI-Driven Cybersecurity for Enterprises
Three-Month Trial Shows AI-Powered Ethical Hacking Costs About the Same as One Manual Pen Test, Reshaping Cybersecurity for Defenders and Attackers
Bengaluru (Karnataka) [India], August 6: FireCompass, an agentic AI platform for autonomous penetration testing and red teaming, today announced that its AI-powered penetration testing agent secured Top 3 positions across multiple HackerOne global leaderboards during a three-month live bug bounty experiment conducted against authorised live production systems.
The achievement demonstrates how AI is making advanced offensive cybersecurity capabilities significantly more accessible, marking a pivotal shift in how organisations approach cyber defence. Operating against real-world production targets not controlled lab environments, the company’s autonomous AI agents independently discovered, validated and responsibly reported vulnerabilities while operating at a cost comparable to a single manual application penetration test.
The findings carry significant implications for India’s rapidly expanding digital economy, where enterprises are accelerating AI adoption while facing an increasingly sophisticated cyber threat landscape. As advanced penetration testing becomes dramatically more affordable through AI, the same economics that enable organisations to continuously identify vulnerabilities can also empower malicious actors with capabilities that were once limited to highly skilled security researchers. For Indian enterprises, this underscores the need to transition from periodic penetration testing to continuous AI-powered security validation. The timing is particularly significant as India’s technology industry is projected to generate US$315 billion in FY26, while headcount is expected to grow by only 2.3%, reflecting a broader shift from labour-led growth towards AI-driven productivity and innovation.
Bikash Barai, Founder and CEO of FireCompass, said: “Our agents had already reached 100% on the benchmarks we tested. This experiment was about what it costs to get into the Top 3 spots in a global bug bounty leaderboard. We reached there with just $5K per month. What it means is that threat actors with a very small investment can be as powerful as the world’s top hackers. This is an opportunity for defenders, but the same economics reach attackers at the same time. The next challenge is not just building more powerful AI. It is engineering the controls, safety, and accountability around it.”
Jay Bavisi, Founder and CEO of EC-Council, said, “We invested in FireCompass because we believed AI would empower cybersecurity professionals, not replace them. FireCompass reached the Top 3 on HackerOne, demonstrating the strength of its technology and engineering. The future of offensive security testing is not AI replacing cybersecurity professionals. It is AI-powered professionals.”
The experiment also demonstrates that while AI is rapidly transforming offensive security testing, responsible deployment is equally critical. FireCompass incorporated multiple safety mechanisms throughout the exercise, including strict enforcement of authorised programme scope, non-destructive validation of vulnerabilities, and limits on request rates, concurrency and operational blast radius. These controls ensured that all testing remained within authorised programme boundaries while maintaining human oversight and accountability.
Bruce Schneier, security technologist, author, Harvard lecturer and FireCompass advisor, said, “The history of security is a history of falling costs. When a capability gets cheap, everyone gets it at once, defenders and attackers alike. This experiment shows offensive AI has crossed that line. The question is no longer whether AI can find real vulnerabilities cheaply; it plainly can. The question now is whether defenders adopt the same capability fast enough, and deploy it with safety and discipline.”
FireCompassʼ harness engineering had multiple frontier models coupled with its purpose-built small language models created by FireCompass. The safety controls included:
- Hard enforcement of each programʼs authorized scope
- Non-destructive validation of vulnerabilities
- Limits on request rates, concurrency, and blast radius
These controls kept the agents within authorised program boundaries. As autonomous ethical hacking becomes more widely adopted, scope enforcement, controlled validation, auditability and human accountability will be as important as model capability.
As autonomous ethical hacking becomes more widely adopted, the company believes that model capability alone will not define the future of offensive cybersecurity. Strong governance through scope enforcement, controlled validation, auditability and human accountability will be equally essential to ensuring AI-powered security testing remains safe, trusted and effective for enterprises.
For leaderboard screenshots and more details, visit www.firecompass.com/blog-ai-penetration-testing-hackerone-top-3.
Methodology note
The experiment was conducted over a three-month period against authorised public bug bounty programmes hosted on HackerOne. FireCompass deployed an automated pipeline of autonomous AI agents to discover, validate and responsibly report vulnerabilities on live production systems within authorised programme scopes. The reported operating cost included AI model usage, cloud infrastructure and human oversight, making it comparable to the cost of a single manual application penetration test.
About FireCompass
FireCompass is an agentic AI platform for autonomous penetration testing and red teaming across web applications, APIs and enterprise infrastructure. The platform discovers shadow assets, multi-stage attack paths, credential reuse, business-logic vulnerabilities and lateral movement opportunities with near-zero false positives. FireCompass is trusted by Fortune 1000 organisations and has been recognised in more than 30 analyst reports.
More at firecompass.com.
If you object to the content of this press release, please notify us at [email protected]. We will respond and rectify the situation within 24 hours.
National
ACTIZEET® Cares Launches Emergency Flood Relief Initiative for Families Affected by the Assam Floods
ACTIZEET® Cares, the CSR arm of ACTIZEET®, has launched an Emergency Flood Relief Initiative in Assam, providing food, drinking water, hygiene kits, blankets, and essential supplies through local partnerships.
Guwahati [Assam], August 4: ACTIZEET® Cares, the Corporate Social Responsibility (CSR) initiative of the wellness brand ACTIZEET®, has announced the launch of its Emergency Flood Relief Initiative to support families affected by the recent floods in Assam. The initiative reflects the organization’s commitment to humanitarian assistance, community resilience, and responsible corporate citizenship during one of the most challenging monsoon seasons in the region.
The recent floods have disrupted the lives of thousands of families across multiple districts in Assam, leaving many without access to safe shelter, clean drinking water, food supplies, and essential healthcare. While government agencies, disaster response teams, volunteers, and local organizations continue their tireless efforts, there remains a significant need for coordinated support that reaches vulnerable communities with dignity and compassion.
Recognizing this urgent need, ACTIZEET® Cares is mobilizing resources to contribute to ongoing relief efforts through partnerships with local organizations, volunteers, and humanitarian stakeholders. The initiative aims to complement existing relief operations by supporting the delivery of essential supplies and promoting long-term community recovery.
“Our hearts are with every family that has been affected by the devastating floods in Assam,” said a spokesperson for ACTIZEET® Cares. “Natural disasters remind us that compassion and collective action are essential. Through ACTIZEET® Cares, we are committed to supporting communities during difficult times while working alongside trusted local partners who understand the needs of the people they serve.”
The Emergency Flood Relief Initiative is designed around several key priorities, including the distribution of food supplies, drinking water, hygiene essentials, blankets, clothing, and other emergency relief materials based on local needs and partner coordination. The program also seeks to encourage community participation by bringing together volunteers, social organizations, and responsible businesses to strengthen relief efforts wherever possible.
Beyond immediate humanitarian assistance, ACTIZEET® Cares believes that disaster recovery extends well beyond the emergency phase. The organization recognizes the importance of helping communities rebuild livelihoods, restore confidence, and strengthen resilience against future natural disasters. As rehabilitation efforts continue, the CSR initiative intends to explore opportunities that support sustainable recovery through community partnerships and responsible social engagement.
The Assam floods have once again highlighted the importance of preparedness, environmental stewardship, and collaborative disaster response. Every year, communities across the Brahmaputra basin demonstrate extraordinary resilience in the face of recurring floods. Their courage serves as an inspiration for organizations across India to contribute meaningfully toward relief and recovery.
ACTIZEET® Cares also encourages businesses, institutions, and citizens to participate in responsible humanitarian efforts through credible organizations and local community groups. Corporate Social Responsibility has the potential to create meaningful impact when resources, expertise, and compassion come together with transparency and accountability.
“As responsible corporate citizens, organizations have an opportunity to support communities beyond business operations,” the spokesperson added. “Whether through financial contributions, volunteer engagement, logistics support, or partnerships with local organizations, every effort can help families move one step closer to recovery.”
ACTIZEET® Cares is committed to ensuring that its humanitarian initiatives align with principles of respect, inclusivity, transparency, and sustainability. The organization believes that relief efforts should prioritize the dignity of affected families while supporting locally coordinated solutions that maximize positive community impact.
The Emergency Flood Relief Initiative also reflects the broader mission of ACTIZEET® Cares to promote social welfare, environmental responsibility, and community development across India. Through various CSR programs, the organization supports initiatives related to environmental sustainability, public awareness, education, community health, and responsible development. The Assam Flood Relief Initiative represents another step toward strengthening this long-term commitment to serving communities during times of need.
ACTIZEET®, known for its commitment to quality, authenticity, and responsible business practices in the natural wellness sector, believes that meaningful social impact begins with empathy and action. While the company’s core mission focuses on providing high-quality wellness products, it also recognizes the importance of contributing positively to society through structured CSR programs that address real community challenges.
More information about the ACTIZEET® brand and its commitment to quality, sustainability, and responsible business practices can be found at https://actizeet.com.
Information about the CSR initiatives, community programs, and environmental commitments of ACTIZEET® Cares is available at https://actizeet.org.
As Assam continues its journey toward recovery, ACTIZEET® Cares stands in solidarity with affected families, relief workers, volunteers, local communities, and all organizations working tirelessly to restore hope. The organization remains committed to supporting humanitarian efforts through collaboration, compassion, and responsible corporate citizenship while encouraging broader participation in building stronger and more resilient communities.
About ACTIZEET®
ACTIZEET® is an Indian wellness brand dedicated to offering premium natural wellness products with a strong focus on authenticity, quality, and responsible sourcing. The company believes in combining traditional knowledge with modern quality standards while maintaining a long-term commitment to customer trust and sustainable business practices. Learn more at https://actizeet.com.
About ACTIZEET® Cares
ACTIZEET® Cares is the Corporate Social Responsibility initiative of ACTIZEET®. The initiative supports programs focused on environmental sustainability, community welfare, education, disaster response, and responsible development. Through collaborative partnerships and meaningful social initiatives, ACTIZEET® Cares works toward creating lasting positive impact for communities across India. Visit https://actizeet.org for additional information.
If you object to the content of this press release, please notify us at [email protected]. We will respond and rectify the situation within 24 hours.
