# Takumi AI Penetration Testing Availability Expanded

We are expanding access to **AI Penetration Testing**, which we began rolling out on June 15, 2026, to more customers. The feature verifies whether a given objective is achievable, from the perspective of a real attacker.

Set a target and a concrete objective — such as **accessing user data** — and Takumi autonomously chains reconnaissance, vulnerability discovery, and exploitation.

The feature is not yet available to all customers, so if you'd like to use it, register from the [application page](https://flatt.tech/takumi/features/pentesting).

![AI Penetration Testing Availability Expanded](/docs/_md-assets/9966128930-eyecatch.png)

## Background

Whitebox and blackbox assessments comprehensively detect vulnerabilities across an entire application using a feature-and-perspective matrix. In real-world operations, however, you often want to answer more than "what vulnerabilities exist" — you want to know whether an attacker could actually reach a specific objective in this environment. Individually minor weaknesses frequently chain together into a serious outcome, such as data exfiltration or a full system compromise.

AI penetration testing answers that question. Rather than enumerating every vulnerability, it focuses on whether a single defined objective is reachable, and Takumi autonomously explores the attack paths that lead to it. Much like a human penetration tester, it forms hypotheses from what it learns during reconnaissance, discovers and chains vulnerabilities, and turns each foothold into the next attack.

## How It Works

You start a run by configuring a target and an objective. Pick an objective from presets such as "accessing user data" or "gaining system access," and Takumi handles everything from reconnaissance to exploitation. Unlike a standard assessment, it doesn't just report vulnerabilities individually — it verifies how those vulnerabilities can be leveraged to actually reach the objective.

While a test runs and after it completes, you can follow a timeline of what the attack has reached and an intrusion map that visualizes the discovered attack paths. When the test finishes, Takumi produces a report of the operations it performed and whether the objective was achieved. Even if the objective was not reached, you can review the report, add further instructions, and resume the test from where it left off.

![Progress](/docs/_md-assets/4652f3ed18-progress.png)

For more detailed configuration and usage, see the user guide.

## Getting Started

AI penetration testing is currently expanding its availability in stages.

:::info
If you'd like to use it, register from the [application page](https://flatt.tech/takumi/features/pentesting) and our team will get in touch.
:::

▼ User Guide: [Penetration Testing](/docs/t/assessment/features/pentest)