We're writing about offensive security

Bring your own cloud (BYOC) and bring your own model (BYOM) are now generally available. The A Security platform runs in your own cloud account, on any major cloud vendor, and every AI call goes to a model you've approved. It's built on our engine, agent harness, and layered guardrails, with no external dependencies, so it runs even in air-gapped environments.

See how autonomous AI agents adapt to WAF defenses, discover bypasses, and share what they learn, changing what web security looks like in the agentic era.

Learn how autonomous remediation closes critical attack paths in seconds to neutralize threats and build machine-speed resilience without risking production.

Offensive security guardrails shouldn't rely on the agent to police itself. Learn how Layered Guardrails keep autonomous agents safe without slowing them down.


Today we released an open source capability framework, lab generator and evaluator for autonomous offensive security. MIT licensed, and available now at github.com/arena-labs-ai/arena.

I spent nearly two decades in cybersecurity, six of them at Sygnia responding to breaches across roughly 40 countries and nearly every industry. You learn something specific from that work that you cannot learn anywhere else: you learn exactly how things break. Not in theory. In production, at 3 a.m., while a real adversary is still inside the environment.

Today A Security is introducing ARENA, the Agentic Red-team Evaluation for Neutral Assessment. The ARENA platform helps red teams, pentesters, security researchers, and enthusiasts generate fresh, real-world-shaped vulnerable targets with ground truth, so they can measure an AI attacker’s performance, sophistication and results over time.