Tag: #security-agent

Content tagged with "security-agent"

Blog Posts

Blog

AWS Security Agent Verification — On-Demand Penetration Testing Detection Quality and Cost

Verified AWS Security Agent's on-demand penetration testing in Tokyo region. Detected 4/5 planted vulnerabilities (0 false positives) including business logic flaws with HIGH confidence. Cost: ~$136/run.

April 2, 202613 min read

infrastructure

#aws #security-agent #penetration-testing+2

TIL

AWS Security Agent service role requires CloudWatch Logs permission (undocumented)

Security Agent pentest fails at PREFLIGHT with AccessDeniedException if the service role lacks logs:CreateLogGroup. Not mentioned in official docs.

April 2, 20261 min read

#aws #security-agent #iam

TIL

Security Agent pentest crashes single-threaded servers — gunicorn or equivalent required

AWS Security Agent runs 13 attack categories in parallel, overwhelming Flask's dev server with HTTP 503. Multi-worker server like gunicorn is required for pentest targets.

April 2, 20261 min read

#aws #security-agent #penetration-testing

TIL

Security Agent pentest works via VPC Config even when CLI domain verification returns UNREACHABLE

verify-target-domain uses public access so private DNS returns UNREACHABLE, but VPC Config pentests perform separate internal verification during PREFLIGHT that succeeds.

April 2, 20261 min read

#aws #security-agent #vpc