Closed Door Security has become the first organisation in Scotland to achieve CREST accreditation for AI-Enabled Penetration Testing, launching the country’s first ever offensive AI capability.
The accreditation means organisations can now access Closed Door Security’s accredited penetration testing services that use advanced AI to simulate how cyber criminals could target them, helping organisations uncover weaknesses across their people, digital assets and infrastructure.
“Over the last few months advanced AI has changed the world of cyber crime,” said William Wright, CEO of Closed Door Security. “We are hearing stories of researchers testing the capabilities of models which has resulted in agents running rogue across the internet, identifying weaknesses in third parties and launching attacks. Our platform is designed to help defenders improve their security through AI enabled penetration testing.
“The agentic platform runs a full assessment across an organisation’s entire environment, helping them uncover weaknesses which could leave them exposed.
“It is a modern, fast, safe and law-abiding approach to improve defence, closely matching the capabilities seen in frontier model providers, such as OpenAI and Anthropic”
Unlike traditional vulnerability scanning, which typically search systems for known security weaknesses, Closed Door Security can now use AI throughout the penetration testing process to replicate modern cyber threats.
Closed Door Security’s proprietary platform is designed and built in-house. It gathers and analyses information about an organisation, works out the routes an attacker could take infiltrate it, and then tests whether the routes actually work. It does this in a fraction of the time a manual assessment takes, which is critical as criminal groups now move from a first foothold to serious damage in mere hours.
Importantly, the findings are then validated by Closed Door Security’s team of expert Cyber Security Consultants and communicated to organisations, along with remediation recommendations, so they can take steps to close the gaps and bolster their overall cyber defences.
“This accreditation means businesses can now access our new capability in a controlled and responsible environment. Instead of simply using AI to scan for vulnerabilities, we can use it to think much more like an attacker, identifying potential routes into an organisation and understanding how individual weaknesses could be combined to create a successful attack,” continued Wright.
“The speed and scale AI brings to penetration testing is significant, but this isn’t about removing people from the process. Our experts will always be responsible for directing the testing, validating the findings, understanding the business impact and, most importantly, helping customers determine what needs to be fixed first.”
To read more security news, click here.
