[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-researchers-build-a-pentesting-ai-that-never-pays-for-tokens":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},6600,"researchers-build-a-pentesting-ai-that-never-pays-for-tokens","Researchers Build a Pentesting AI That Never Pays for Tokens","PentestChain runs penetration tests through a free local model first, falls back to free-tier cloud AI, and reports zero measured paid API cost.","A new penetration testing framework claims it can run an entire security engagement without ever touching a paid API.\n\nPentestChain is a ten-phase automated pentesting system built by academic researchers, pairing a fixed, deterministic exploit map with a tiered AI fallback chain. A local 7-billion-parameter model, qwen2.5-7b run through Ollama, tries first; if it stalls, the system escalates to free tiers of OpenRouter and Cerebras, with a rule-based fallback that always returns an answer. The whole pipeline is exposed through eleven tools on a Model Context Protocol (MCP) server. Tested against legacy targets, it detected 26 services and enriched data on 34 CVEs while running at zero measured paid-API cost.\n\nEarlier pentesting-AI research leaned on frontier models like GPT-4, and the per-engagement token bill put continuous automated testing out of reach for the smaller organizations that need it most. The researchers also treat the MCP server itself as an attack surface worth worrying about, grounding their threat model in real 2025 incidents: the CVE-2025-6514 remote-code-execution flaw in mcp-remote and the postmark-mcp supply-chain backdoor.\n\nZero measured paid-API cost is not the same as zero cost - someone still has to run and secure that local model, and handing a 7-billion-parameter model the keys to an offensive toolchain is its own experiment worth watching closely.","[\"pentesting\",\"ai-agents\",\"mcp\",\"llm-cost\"]","2026-09-17T04:00:00.000Z","2026-09-18T02:03:06.796Z","2026-09-18T02:03:18.698Z","published",null,[],"security",[26,27,28,29],"pentesting","ai-agents","mcp","llm-cost",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.18120",0,{"sections":36},[37,42,45,50,55,59,63,68,73,77,82,87,92,97],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",3853,"2026-09-17T08:27:09.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":18},"Security",648,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",338,"2026-09-11T04:00:00.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":18},"Hardware","hardware",154,{"name":60,"slug":61,"count":62,"latest_published_at":18},"Science","science",114,{"name":64,"slug":65,"count":66,"latest_published_at":67},"Consumer Tech","consumer-tech",99,"2026-09-09T17:27:33.000Z",{"name":69,"slug":70,"count":71,"latest_published_at":72},"Software","software",75,"2026-09-10T20:41:21.000Z",{"name":74,"slug":75,"count":76,"latest_published_at":18},"Dev Tools","dev-tools",73,{"name":78,"slug":79,"count":80,"latest_published_at":81},"Startups","startups",55,"2026-09-09T23:14:29.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Gaming","gaming",43,"2026-09-10T12:18:06.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"General","general",41,"2026-09-08T01:57:23.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]