{"guid":"89354a50-d435-4899-ab5d-eb6e4a37150e","title":"Hackbots under control: Methodology for Autonomous Pentesters","subtitle":null,"slug":"god2026-110752-hackbots-under-control-me","link":"https://c3voc.de","description":"Autonomous pentesting tools have matured to the point where they can reliably find vulnerabilities, but finding vulnerabilities is not the same as doing a professional pentest. Bug bounty hunting optimizes for high-severity impact while a client engagement requires systematic coverage against a framework, with every control checked.\n\nIn this talk we will explore how we designed an internal solution that layers the OWASP ASVS framework on top of existing agentic testing products. We will cover what we put in place to get reliable results, the guardrails we designed to ensure safe behavior in client environments, and how our harness improves the coverage of agentic testing solutions.\n\nLicensed to the public under https://creativecommons.org/licenses/by-sa/4.0/","original_language":"eng","persons":["Tanguy Snoeck"],"view_count":8,"promoted":false,"date":"2026-09-24T10:20:00.000+02:00","release_date":"2026-09-24T00:00:00.000+02:00","updated_at":"2026-09-24T16:15:08.652+02:00","tags":["110752","2026","god2026","Saal Baden","god2026-eng","god2026","Day 1"],"length":1118,"duration":1118,"thumb_url":"https://static.media.ccc.de/media/events/god/2026/110752-89354a50-d435-4899-ab5d-eb6e4a37150e.jpg","poster_url":"https://static.media.ccc.de/media/events/god/2026/110752-89354a50-d435-4899-ab5d-eb6e4a37150e_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/god/2026/110752-89354a50-d435-4899-ab5d-eb6e4a37150e.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/god/2026/110752-89354a50-d435-4899-ab5d-eb6e4a37150e.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/god2026-110752-hackbots-under-control-me","url":"https://api.media.ccc.de/public/events/89354a50-d435-4899-ab5d-eb6e4a37150e","conference_title":"German OWASP Day 2026","conference_url":"https://api.media.ccc.de/public/conferences/god2026","related":[],"recordings":[{"length":1118,"mime_type":"video/mp4","language":"eng","filename":"god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-24T11:37:41.429+02:00","label":"eng 1080p","size":146,"recording_url":"https://cdn.media.ccc.de/events/god/2026/h264-hd/god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_hd.mp4","url":"https://api.media.ccc.de/public/recordings/105334","event_url":"https://api.media.ccc.de/public/events/89354a50-d435-4899-ab5d-eb6e4a37150e","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":1118,"mime_type":"video/mp4","language":"eng","filename":"god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-24T11:40:31.956+02:00","label":"eng 576p","size":38,"recording_url":"https://cdn.media.ccc.de/events/god/2026/h264-sd/god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_sd.mp4","url":"https://api.media.ccc.de/public/recordings/105336","event_url":"https://api.media.ccc.de/public/events/89354a50-d435-4899-ab5d-eb6e4a37150e","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":1118,"mime_type":"audio/mpeg","language":"eng","filename":"god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-24T11:40:35.626+02:00","label":"eng","size":17,"recording_url":"https://cdn.media.ccc.de/events/god/2026/mp3/god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/105337","event_url":"https://api.media.ccc.de/public/events/89354a50-d435-4899-ab5d-eb6e4a37150e","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":1118,"mime_type":"video/webm;codecs=av01","language":"eng","filename":"god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_av1-sd.webm","state":"new","folder":"av1-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-24T11:45:31.772+02:00","label":"eng 576p","size":32,"recording_url":"https://cdn.media.ccc.de/events/god/2026/av1-sd/god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_av1-sd.webm","url":"https://api.media.ccc.de/public/recordings/105339","event_url":"https://api.media.ccc.de/public/events/89354a50-d435-4899-ab5d-eb6e4a37150e","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":1118,"mime_type":"audio/opus","language":"eng","filename":"god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-24T11:45:50.836+02:00","label":"eng","size":11,"recording_url":"https://cdn.media.ccc.de/events/god/2026/opus/god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_opus.opus","url":"https://api.media.ccc.de/public/recordings/105340","event_url":"https://api.media.ccc.de/public/events/89354a50-d435-4899-ab5d-eb6e4a37150e","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":1118,"mime_type":"video/webm;codecs=av01","language":"eng","filename":"god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-24T11:49:04.095+02:00","label":"eng 1080p","size":83,"recording_url":"https://cdn.media.ccc.de/events/god/2026/av1-hd/god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/105342","event_url":"https://api.media.ccc.de/public/events/89354a50-d435-4899-ab5d-eb6e4a37150e","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":1118,"mime_type":"video/webm","language":"eng","filename":"god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-24T11:52:32.020+02:00","label":"eng 576p","size":41,"recording_url":"https://cdn.media.ccc.de/events/god/2026/webm-sd/god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/105343","event_url":"https://api.media.ccc.de/public/events/89354a50-d435-4899-ab5d-eb6e4a37150e","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":1118,"mime_type":"video/webm","language":"eng","filename":"god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-24T11:57:04.598+02:00","label":"eng 1080p","size":103,"recording_url":"https://cdn.media.ccc.de/events/god/2026/webm-hd/god2026-110752-eng-Hackbots_under_control_Methodology_for_Autonomous_Pentesters_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/105344","event_url":"https://api.media.ccc.de/public/events/89354a50-d435-4899-ab5d-eb6e4a37150e","conference_url":"https://api.media.ccc.de/public/conferences/god2026"}]}