Identify security system weaknesses, using penetration tests.
Identify security system weaknesses, using penetration tests.
Task automation exposure
Low exposure
Exposure basis
[v4/median] score 35 (raw 35 | A 25 / B 35 / C 35 | modality: other) While AI and automated scanners can execute standard vulnerability scans and exploit known CVEs, professional penetration testing requires complex, multi-step lateral movement, context-aware social engineering, and creative logic-bypassing that current AI agents cannot reliably p (capable: AI-augmented vulnerability scanners (e.g., Burp Suite with AI plugins, Nuclei))
0 capabilities · 1 occupations
Basis
How exposure was assessed
[v4/median] score 35 (raw 35 | A 25 / B 35 / C 35 | modality: other) While AI and automated scanners can execute standard vulnerability scans and exploit known CVEs, professional penetration testing requires complex, multi-step lateral movement, context-aware social engineering, and creative logic-bypassing that current AI agents cannot reliably p (capable: AI-augmented vulnerability scanners (e.g., Burp Suite with AI plugins, Nuclei))
How much of this task's output current AI can produce or substantially assist.
Best current model strength on any capability this task requires.
This is an assessment of technical feasibility plus published evidence - not a forecast. Even fully automatable tasks are often not automated, because of cost, verification, liability, regulation or the fact that the task is bundled with other work.
Occupations
Occupations that perform this task (1)
Importance is the O*NET-style weight of this task within each occupation. The same task can be highly exposed but peripheral to one job and core to another.
| Occupation | Industry | Importance | Role | Occupation AI exposure |
|---|---|---|---|---|
| Penetration Testers | Cross-industry | 4.7/5 | core | 12 |
Evidence
Evidence (0)
No evidence item is mapped to this specific task yet. The exposure figure above rests on the v1 editorial baseline and on the capability assessment, and should be treated as low-confidence. Pages with fewer than 0 evidence items are excluded from sitemaps.