Ridge Security announced that it has been named an IDC Innovator in the IDC Innovators: Autonomous Penetration Testing for DevSecOps, 2026 (doc # US54175326, July 2026) report.
Also Read: CIO Influence Interview with John Elliott, Cybersecurity Author Fellow at Pluralsight
IDC Innovators report recognizes Ridge Security for advancing agentic autonomous penetration testing for DevSecOps.
As modern applications become increasingly distributed, API-driven, cloud-native, and frequently updated, security teams face a fundamental challenge: traditional penetration testing cannot always keep pace with the speed of modern software development. While periodic assessments remain valuable, they often leave organizations with gaps between testing cycles or generate large volumes of findings without proving whether vulnerabilities can actually be exploited.
Agentic autonomous penetration testing addresses this challenge by enabling AI agents to reason, plan, and adapt throughout an assessment. Rather than executing a predefined sequence of tests, agentic systems establish objectives, formulate hypotheses, validate attack paths, and continuously adjust their strategy as new evidence emerges.
Ridge Security’s RidgeGen applies this through a stateful, multi-agent architecture designed to preserve context through an assessment. As agents uncover new information about an application or environment, the platform adapts its testing strategy, pursues deeper attack paths, and validates how multiple weaknesses can be chained into meaningful exploits.
“Agentic AI changes the equation for penetration testing because the technology is no longer limited to executing a fixed catalog,” said Lydia Zhang, President and Co-Founder of Ridge Security. “RidgeGen is designed to reason beyond CVE-based detection. It understands business logic, application workflows, and attack paths to uncover risks that traditional automated tools often miss, significantly reducing false negatives.”
The Agentic Advantage – RidgeGen
- Agentic reasoning that enables autonomous decision-making throughout penetration testing
- Stateful, context-aware testing that preserves knowledge gathered during an assessment
- Multi-agent orchestration for discovering, validating, and chaining exploitable risks
- Adaptive testing that changes strategy based on application behavior and newly discovered evidence
- Autonomous exploit validation that distinguishes confirmed exploitable risk from theoretical findings
- Customer-defined objectives, testing boundaries, AI models, and agents for governance and flexibility
The IDC Innovators report profiles seven vendors operating in autonomous penetration testing for DevSecOps.
Unlike traditional automated testing, which executes predefined security checks, agentic systems continuously reason about the environment, determine which attack paths to pursue, and adjust based on what they learn.
“Running more security tests isn’t enough,” said Nick Mo, CEO and Co-Founder of Ridge Security. “The real challenge is understanding what each discovery means and deciding what to investigate next. RidgeGen’s stateful, multi-agent architecture continuously builds on what it learns, making autonomous penetration testing more intelligent, targeted, and effective.”
Catch more CIO Insights: How Are CIOs Aligning Technology with Workforce Agility?
[To share your insights with us, please write to psen@itechseries.com ]
