Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
Task automation exposure
Very low exposure
Exposure basis
[v4/median] score 15 (raw 15 | A 15 / B 15 / C 15 | modality: other) While AI and automated scanners can execute specific exploits and identify known vulnerabilities, the task of penetration testing requires complex, adaptive reasoning, creative lateral movement, and context-aware exploitation that current AI cannot perform at a professional, end- (capable: AI-assisted vulnerability scanners (e.g., Burp Suite with AI plugins, Nuclei))
0 capabilities · 1 occupations
Basis
How exposure was assessed
[v4/median] score 15 (raw 15 | A 15 / B 15 / C 15 | modality: other) While AI and automated scanners can execute specific exploits and identify known vulnerabilities, the task of penetration testing requires complex, adaptive reasoning, creative lateral movement, and context-aware exploitation that current AI cannot perform at a professional, end- (capable: AI-assisted vulnerability scanners (e.g., Burp Suite with AI plugins, Nuclei))
How much of this task's output current AI can produce or substantially assist.
Best current model strength on any capability this task requires.
This is an assessment of technical feasibility plus published evidence - not a forecast. Even fully automatable tasks are often not automated, because of cost, verification, liability, regulation or the fact that the task is bundled with other work.
Occupations
Occupations that perform this task (1)
Importance is the O*NET-style weight of this task within each occupation. The same task can be highly exposed but peripheral to one job and core to another.
| Occupation | Industry | Importance | Role | Occupation AI exposure |
|---|---|---|---|---|
| Penetration Testers | Cross-industry | 4.4/5 | core | 12 |
Evidence
Evidence (0)
No evidence item is mapped to this specific task yet. The exposure figure above rests on the v1 editorial baseline and on the capability assessment, and should be treated as low-confidence. Pages with fewer than 0 evidence items are excluded from sitemaps.