Sprocket Security Launches Apex AI Agent for Continuous Web Application Testing

Sprocket Security has launched Apex, an AI penetration testing agent designed to accelerate vulnerability discovery in web applications, announced in a press release. Apex performs autonomous, context aware, unauthenticated testing to surface exploitable vulnerabilities at machine speed.

Apex integrates with Sprocket's attack surface management platform to leverage each customer's assets, technology stack, testing history, and previous findings. This context allows the agent to identify complex vulnerabilities and automatically flag regressions when previously fixed issues reappear. Each test run builds on prior results, refining accuracy and prioritization.

Human testers at Sprocket validate Apex's findings before they appear in customer dashboards. The agent tests against OWASP Top 10 categories and beyond, chaining smaller weaknesses into attack paths that demonstrate real impact. Each run produces an Attack Narrative documenting the tests performed and results obtained.

Apex operates within Sprocket's SOC 2 environment under a zero data retention policy. It runs on a model agnostic framework that can adopt new models over time without using customer data for training. Additional AI agents are planned for release later in 2026.