{"id":"a156ba5b1632e000f159ab5e93de2b296808bf097ae2babec246bbbf372f1e83","title":"Cloudflare argues AI pentesting orchestrators are changing cyber defense","argument":"Cloudflare argues that the spread of AI penetration testing and orchestration frameworks has changed cyber defense, as defenders struggle to keep up with attacks it describes as autonomous and volumetric. It reports that more than 50 framework families attempted to scan its customers globally in the last three days, and that daily requests from AI pentesting and exploitation tools grew 30-fold since October 1.\n\nThe company describes frameworks such as ARTEX as coordinating AI agents to map environments and carry out stages of the Cyber Kill Chain, sometimes using parallel agents and connecting existing tools through Model Context Protocol (MCP). Cloudflare says this orchestration increases attackers’ speed and scale. It recounts incidents where exposed, non-expiring credentials in CI/CD pipelines enabled access across environments. In one investigation, ARTEX used a compromised API token; Cloudflare observed rapid activity, including database dump requests, and says much of it was likely lightly guided by a human operator.\n\nCloudflare recommends a six-pillar “Modern Security Model,” including traffic control and Web Application Firewall (WAF), anomaly detection, Bot Defense, Identity-Gated Access, validated schemas and explicit security controls, and Threat Intelligence. It also emphasizes micro-segmentation to limit lateral movement.","topicIds":["power-and-infrastructure","institutions-and-trust"],"domain":"infrastructure","claimType":"attributed reading","limits":"The reported scanning and request trends are Cloudflare observations; the post does not establish that they represent all organizations or all AI pentesting activity. The detailed ARTEX activity is from one incident response investigation, and Cloudflare says it believes much of the activity was lightly guided by a human operator. The post recommends the Modern Security Model but does not report measured outcomes from implementing it.","speaker":{"name":"Cloudflare","roleAtSource":"Publisher"},"source":{"title":"Adapting to AI penetration testing orchestrators: The Modern Security Model","publisher":"Cloudflare Blog","format":"Article","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","publishedAt":"2026-11-13T19:26:07.564Z","dateBasis":"Date stated by the publisher."},"evidence":[{"text":"Cloudflare reports that more than 50 framework families attempted to scan its customers globally during the three days before the post.","excerpt":"In just the last three days, we have seen over 50 framework families attempt to scan Cloudflare customers globally.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"Cloudflare says daily requests of AI penetration testing and exploitation tools grew 30-fold since October 1.","excerpt":"Daily requests of AI penetration testing (pentesting) and exploitation tools has grown by 30x since October 1.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"Cloudflare describes open-source frameworks as coordinating AI agents through stages of the Cyber Kill Chain and connecting existing tools through MCP.","excerpt":"Open-source pentesting frameworks are able to orchestrate AI agents to carry out stages of the traditional Cyber Kill Chain at scale.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"Cloudflare links exposed, non-expiring CI/CD tokens with broad access across an organization’s hyperscaler infrastructure in incidents it investigated.","excerpt":"Attackers repeatedly compromised static, non-expiring tokens running inside CI/CD pipelines, which granted broad, cross-environment access across the organization's hyperscaler infrastructure.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"Cloudflare recommends a six-pillar Modern Security Model and highlights micro-segmentation as a way to limit lateral movement.","excerpt":"To counter LLM-based pentest frameworks, we recommend that all organizations adopt what we call the Modern Security Model, which has six key pillars:","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"The post describes observed activity in one incident involving ARTEX, including database dump requests, while qualifying that the activity was likely lightly guided by a human operator.","excerpt":"While we believe that much of this activity was lightly guided by the human operator, this is just one example of the speed and breadth that ARTEX and similar frameworks can achieve post-compromise.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","checkedAt":"2026-11-13T19:30:43.740Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M7B3YN6VXD98D313GQ0MHPM2.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-11-13T19:30:44.099Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"What measured results from deploying the Modern Security Model would show whether it limits the attacks Cloudflare describes?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Cloudflare argues AI pentesting orchestrators are changing cyber defense","summary":"Cloudflare argues that the spread of AI penetration testing and orchestration frameworks has changed cyber defense, as defenders struggle to keep up with attacks it describes as autonomous and volumetric. It reports that more than 50 framework families attempted to scan its customers globally in the last three days, and that daily requests from AI pentesting and exploitation tools grew 30-fold since October 1.\n\nThe company describes frameworks such as ARTEX as coordinating AI agents to map environments and carry out stages of the Cyber Kill Chain, sometimes using parallel agents and connecting existing tools through Model Context Protocol (MCP). Cloudflare says this orchestration increases attackers’ speed and scale. It recounts incidents where exposed, non-expiring credentials in CI/CD pipelines enabled access across environments. In one investigation, ARTEX used a compromised API token; Cloudflare observed rapid activity, including database dump requests, and says much of it was likely lightly guided by a human operator.\n\nCloudflare recommends a six-pillar “Modern Security Model,” including traffic control and Web Application Firewall (WAF), anomaly detection, Bot Defense, Identity-Gated Access, validated schemas and explicit security controls, and Threat Intelligence. It also emphasizes micro-segmentation to limit lateral movement.","question":"What measured results from deploying the Modern Security Model would show whether it limits the attacks Cloudflare describes?","claims":[{"text":"Cloudflare reports that more than 50 framework families attempted to scan its customers globally during the three days before the post.","excerpt":"In just the last three days, we have seen over 50 framework families attempt to scan Cloudflare customers globally.","support":"source-stated"},{"text":"Cloudflare says daily requests of AI penetration testing and exploitation tools grew 30-fold since October 1.","excerpt":"Daily requests of AI penetration testing (pentesting) and exploitation tools has grown by 30x since October 1.","support":"source-stated"},{"text":"Cloudflare describes open-source frameworks as coordinating AI agents through stages of the Cyber Kill Chain and connecting existing tools through MCP.","excerpt":"Open-source pentesting frameworks are able to orchestrate AI agents to carry out stages of the traditional Cyber Kill Chain at scale.","support":"source-stated"},{"text":"Cloudflare links exposed, non-expiring CI/CD tokens with broad access across an organization’s hyperscaler infrastructure in incidents it investigated.","excerpt":"Attackers repeatedly compromised static, non-expiring tokens running inside CI/CD pipelines, which granted broad, cross-environment access across the organization's hyperscaler infrastructure.","support":"source-stated"},{"text":"Cloudflare recommends a six-pillar Modern Security Model and highlights micro-segmentation as a way to limit lateral movement.","excerpt":"To counter LLM-based pentest frameworks, we recommend that all organizations adopt what we call the Modern Security Model, which has six key pillars:","support":"source-stated"},{"text":"The post describes observed activity in one incident involving ARTEX, including database dump requests, while qualifying that the activity was likely lightly guided by a human operator.","excerpt":"While we believe that much of this activity was lightly guided by the human operator, this is just one example of the speed and breadth that ARTEX and similar frameworks can achieve post-compromise.","support":"source-stated"}],"limitations":["The reported scanning and request trends are Cloudflare observations; the post does not establish that they represent all organizations or all AI pentesting activity.","The detailed ARTEX activity is from one incident response investigation, and Cloudflare says it believes much of the activity was lightly guided by a human operator.","The post recommends the Modern Security Model but does not report measured outcomes from implementing it."],"mediaId":"a009bbdbfbe6de47102d4987701da3c8d50cf9713e2c59211ace27845c45dac6","correctionReason":null,"id":"a156ba5b1632e000f159ab5e93de2b296808bf097ae2babec246bbbf372f1e83","publicationId":"e8818e52-9988-442e-8515-bd7e7982cfb0","version":1,"sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","sourceTitle":"Adapting to AI penetration testing orchestrators: The Modern Security Model","publisher":"Cloudflare","publishedAt":"2026-11-13T19:26:07.564Z","originalPublished":{"value":"2026-11-13T19:26:07.564Z","precision":"instant","basis":"publisher_page"},"firstObservedAt":"2026-11-13T19:27:29.321Z","createdAt":"2026-11-13T19:31:46.101Z","historical":false,"entityIds":["cloudflare"],"topicIds":["power-and-infrastructure","institutions-and-trust"],"media":[{"id":"a009bbdbfbe6de47102d4987701da3c8d50cf9713e2c59211ace27845c45dac6","kind":"article","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-13T19:30:44.099Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."},{"id":"afbe1e0d2bf9be613a6b25b9ad07275f40fb2651962f66c6827c67dacc9bef2a","kind":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M7B3YN6VXD98D313GQ0MHPM2.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","label":"View source image","provenance":"publisher_page","verification":{"status":"verified","checkedAt":"2026-11-13T19:30:44.099Z","method":"publisher_association_and_head","contentType":"image/webp","cacheUntil":1794598244099},"recommendationReason":"Observed on the acquired publisher source; availability checked."}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","checkedAt":"2026-11-13T19:30:43.740Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M7B3YN6VXD98D313GQ0MHPM2.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-11-13T19:30:44.099Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"editorialDecision":{"outcome":"accept","reasonCodes":["useful_perspective"],"rubricVersion":"stream-admission-v7","mediaId":"a009bbdbfbe6de47102d4987701da3c8d50cf9713e2c59211ace27845c45dac6","confidence":0.69,"provider":"typesafe","model":"jev-1.13.0","inputHash":"cc55f1554ff117fc9fdd50a029d81da9d75e6dea4ee7130c6ef1e05994a58da3","decidedAt":"2026-11-13T19:30:45.533Z"},"provenance":{"textHash":"66738c383a938709728b0734cb4e14fa915729587301edbe2dad3f8179210d23","observationId":"253630d4a7e34fecac2128c6daaf647e03b7b489fe82a9e69b4297b45f92c09a","retrievedAt":"2026-11-13T19:30:43.740Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"f4731aee-898b-4e8e-8710-6b0cae02ade5"},"reviewer":{"model":"gpt-6-luna","runId":"5fe7023a-38e5-4a68-8bb6-fdfd419613d2"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-13T19:31:46.101Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[],"authorRole":"article-author","hosts":[],"status":"missing","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Cloudflare Blog","url":null,"kind":"unknown","actorId":null},"role":"publisher","scope":{"kind":"publication","locator":null},"literalCredit":"Cloudflare Blog","status":"stated","provenance":{"basis":"article-publisher","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","locator":"document/html[1]/head[0]/script[56]@12289.publisher"},"assertionId":"d8b56cfc8048ce59ee54137303c665ce1dd38a69b9f7d624f9ad9acf6cfe427e:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-13T19:30:43.740Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"d8b56cfc8048ce59ee54137303c665ce1dd38a69b9f7d624f9ad9acf6cfe427e","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","contentSha256":"99eee86ca5a97066771b719b4186f5a739d30f3b1ce524e1276b6be709f1a36b","textHash":"66738c383a938709728b0734cb4e14fa915729587301edbe2dad3f8179210d23","observedAt":"2026-11-13T19:30:43.740Z"}}],"participationCoverage":{"total":1,"returned":1,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":{"name":"Cloudflare Blog","url":null},"sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","snapshotId":"d8b56cfc8048ce59ee54137303c665ce1dd38a69b9f7d624f9ad9acf6cfe427e","contentSha256":"99eee86ca5a97066771b719b4186f5a739d30f3b1ce524e1276b6be709f1a36b","textHash":"66738c383a938709728b0734cb4e14fa915729587301edbe2dad3f8179210d23","observedAt":"2026-11-13T19:30:43.740Z","basis":"publisher-page-metadata","sourceLinks":32,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/a156ba5b1632e000f159ab5e93de2b296808bf097ae2babec246bbbf372f1e83/source"}},"canonicalUrl":"https://escapemeridian.com/readings/cloudflare-argues-ai-pentesting-orchestrators-are-changing-a156ba5b","formats":{"html":"/readings/cloudflare-argues-ai-pentesting-orchestrators-are-changing-a156ba5b","markdown":"/readings/cloudflare-argues-ai-pentesting-orchestrators-are-changing-a156ba5b.md","json":"/readings/cloudflare-argues-ai-pentesting-orchestrators-are-changing-a156ba5b.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"conditions":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-ai-agent","name":"AI agent","explanation":"An AI system that chooses and carries out actions toward a goal, often using software tools.","referenceUrl":"https://www.ibm.com/think/topics/ai-agents"},{"id":"term-api","name":"API","explanation":"An application programming interface: a defined way for software to request data or actions from another system.","referenceUrl":"https://developer.mozilla.org/en-US/docs/Glossary/API"}],"entities":[{"id":"cloudflare","name":"Cloudflare","kind":"organization","context":"Cloudflare provides networking, security and computing services that help run websites and applications.","referenceUrls":["https://blog.cloudflare.com/"],"path":"/entities/cloudflare","json":"/entities/cloudflare.json","markdown":"/entities/cloudflare.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"a156ba5b1632e000f159ab5e93de2b296808bf097ae2babec246bbbf372f1e83","revision":"e8818e52-9988-442e-8515-bd7e7982cfb0","revisionKind":"publication-id","title":"Cloudflare argues AI pentesting orchestrators are changing cyber defense","url":"https://escapemeridian.com/readings/cloudflare-argues-ai-pentesting-orchestrators-are-changing-a156ba5b"},"source":{"type":"source","id":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","revision":"66738c383a938709728b0734cb4e14fa915729587301edbe2dad3f8179210d23","revisionKind":"sha256-source-text","title":"Adapting to AI penetration testing orchestrators: The Modern Security Model","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"a156ba5b1632e000f159ab5e93de2b296808bf097ae2babec246bbbf372f1e83","title":"Cloudflare argues AI pentesting orchestrators are changing cyber defense","argument":"Cloudflare argues that the spread of AI penetration testing and orchestration frameworks has changed cyber defense, as defenders struggle to keep up with attacks it describes as autonomous and volumetric. It reports that more than 50 framework families attempted to scan its customers globally in the last three days, and that daily requests from AI pentesting and exploitation tools grew 30-fold since October 1.\n\nThe company describes frameworks such as ARTEX as coordinating AI agents to map environments and carry out stages of the Cyber Kill Chain, sometimes using parallel agents and connecting existing tools through Model Context Protocol (MCP). Cloudflare says this orchestration increases attackers’ speed and scale. It recounts incidents where exposed, non-expiring credentials in CI/CD pipelines enabled access across environments. In one investigation, ARTEX used a compromised API token; Cloudflare observed rapid activity, including database dump requests, and says much of it was likely lightly guided by a human operator.\n\nCloudflare recommends a six-pillar “Modern Security Model,” including traffic control and Web Application Firewall (WAF), anomaly detection, Bot Defense, Identity-Gated Access, validated schemas and explicit security controls, and Threat Intelligence. It also emphasizes micro-segmentation to limit lateral movement.","topicIds":["power-and-infrastructure","institutions-and-trust"],"domain":"infrastructure","claimType":"attributed reading","limits":"The reported scanning and request trends are Cloudflare observations; the post does not establish that they represent all organizations or all AI pentesting activity. The detailed ARTEX activity is from one incident response investigation, and Cloudflare says it believes much of the activity was lightly guided by a human operator. The post recommends the Modern Security Model but does not report measured outcomes from implementing it.","speaker":{"name":"Cloudflare","roleAtSource":"Publisher"},"source":{"title":"Adapting to AI penetration testing orchestrators: The Modern Security Model","publisher":"Cloudflare Blog","format":"Article","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","publishedAt":"2026-11-13T19:26:07.564Z","dateBasis":"Date stated by the publisher."},"evidence":[{"text":"Cloudflare reports that more than 50 framework families attempted to scan its customers globally during the three days before the post.","excerpt":"In just the last three days, we have seen over 50 framework families attempt to scan Cloudflare customers globally.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"Cloudflare says daily requests of AI penetration testing and exploitation tools grew 30-fold since October 1.","excerpt":"Daily requests of AI penetration testing (pentesting) and exploitation tools has grown by 30x since October 1.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"Cloudflare describes open-source frameworks as coordinating AI agents through stages of the Cyber Kill Chain and connecting existing tools through MCP.","excerpt":"Open-source pentesting frameworks are able to orchestrate AI agents to carry out stages of the traditional Cyber Kill Chain at scale.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"Cloudflare links exposed, non-expiring CI/CD tokens with broad access across an organization’s hyperscaler infrastructure in incidents it investigated.","excerpt":"Attackers repeatedly compromised static, non-expiring tokens running inside CI/CD pipelines, which granted broad, cross-environment access across the organization's hyperscaler infrastructure.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"Cloudflare recommends a six-pillar Modern Security Model and highlights micro-segmentation as a way to limit lateral movement.","excerpt":"To counter LLM-based pentest frameworks, we recommend that all organizations adopt what we call the Modern Security Model, which has six key pillars:","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"},{"text":"The post describes observed activity in one incident involving ARTEX, including database dump requests, while qualifying that the activity was likely lightly guided by a human operator.","excerpt":"While we believe that much of this activity was lightly guided by the human operator, this is just one example of the speed and breadth that ARTEX and similar frameworks can achieve post-compromise.","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","relationship":"Source-stated"}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","checkedAt":"2026-11-13T19:30:43.740Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M7B3YN6VXD98D313GQ0MHPM2.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-11-13T19:30:44.099Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"What measured results from deploying the Modern Security Model would show whether it limits the attacks Cloudflare describes?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"Cloudflare argues AI pentesting orchestrators are changing cyber defense","summary":"Cloudflare argues that the spread of AI penetration testing and orchestration frameworks has changed cyber defense, as defenders struggle to keep up with attacks it describes as autonomous and volumetric. It reports that more than 50 framework families attempted to scan its customers globally in the last three days, and that daily requests from AI pentesting and exploitation tools grew 30-fold since October 1.\n\nThe company describes frameworks such as ARTEX as coordinating AI agents to map environments and carry out stages of the Cyber Kill Chain, sometimes using parallel agents and connecting existing tools through Model Context Protocol (MCP). Cloudflare says this orchestration increases attackers’ speed and scale. It recounts incidents where exposed, non-expiring credentials in CI/CD pipelines enabled access across environments. In one investigation, ARTEX used a compromised API token; Cloudflare observed rapid activity, including database dump requests, and says much of it was likely lightly guided by a human operator.\n\nCloudflare recommends a six-pillar “Modern Security Model,” including traffic control and Web Application Firewall (WAF), anomaly detection, Bot Defense, Identity-Gated Access, validated schemas and explicit security controls, and Threat Intelligence. It also emphasizes micro-segmentation to limit lateral movement.","question":"What measured results from deploying the Modern Security Model would show whether it limits the attacks Cloudflare describes?","claims":[{"text":"Cloudflare reports that more than 50 framework families attempted to scan its customers globally during the three days before the post.","excerpt":"In just the last three days, we have seen over 50 framework families attempt to scan Cloudflare customers globally.","support":"source-stated"},{"text":"Cloudflare says daily requests of AI penetration testing and exploitation tools grew 30-fold since October 1.","excerpt":"Daily requests of AI penetration testing (pentesting) and exploitation tools has grown by 30x since October 1.","support":"source-stated"},{"text":"Cloudflare describes open-source frameworks as coordinating AI agents through stages of the Cyber Kill Chain and connecting existing tools through MCP.","excerpt":"Open-source pentesting frameworks are able to orchestrate AI agents to carry out stages of the traditional Cyber Kill Chain at scale.","support":"source-stated"},{"text":"Cloudflare links exposed, non-expiring CI/CD tokens with broad access across an organization’s hyperscaler infrastructure in incidents it investigated.","excerpt":"Attackers repeatedly compromised static, non-expiring tokens running inside CI/CD pipelines, which granted broad, cross-environment access across the organization's hyperscaler infrastructure.","support":"source-stated"},{"text":"Cloudflare recommends a six-pillar Modern Security Model and highlights micro-segmentation as a way to limit lateral movement.","excerpt":"To counter LLM-based pentest frameworks, we recommend that all organizations adopt what we call the Modern Security Model, which has six key pillars:","support":"source-stated"},{"text":"The post describes observed activity in one incident involving ARTEX, including database dump requests, while qualifying that the activity was likely lightly guided by a human operator.","excerpt":"While we believe that much of this activity was lightly guided by the human operator, this is just one example of the speed and breadth that ARTEX and similar frameworks can achieve post-compromise.","support":"source-stated"}],"limitations":["The reported scanning and request trends are Cloudflare observations; the post does not establish that they represent all organizations or all AI pentesting activity.","The detailed ARTEX activity is from one incident response investigation, and Cloudflare says it believes much of the activity was lightly guided by a human operator.","The post recommends the Modern Security Model but does not report measured outcomes from implementing it."],"mediaId":"a009bbdbfbe6de47102d4987701da3c8d50cf9713e2c59211ace27845c45dac6","correctionReason":null,"id":"a156ba5b1632e000f159ab5e93de2b296808bf097ae2babec246bbbf372f1e83","publicationId":"e8818e52-9988-442e-8515-bd7e7982cfb0","version":1,"sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","sourceTitle":"Adapting to AI penetration testing orchestrators: The Modern Security Model","publisher":"Cloudflare","publishedAt":"2026-11-13T19:26:07.564Z","originalPublished":{"value":"2026-11-13T19:26:07.564Z","precision":"instant","basis":"publisher_page"},"firstObservedAt":"2026-11-13T19:27:29.321Z","createdAt":"2026-11-13T19:31:46.101Z","historical":false,"entityIds":["cloudflare"],"topicIds":["power-and-infrastructure","institutions-and-trust"],"media":[{"id":"a009bbdbfbe6de47102d4987701da3c8d50cf9713e2c59211ace27845c45dac6","kind":"article","url":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-13T19:30:44.099Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."},{"id":"afbe1e0d2bf9be613a6b25b9ad07275f40fb2651962f66c6827c67dacc9bef2a","kind":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M7B3YN6VXD98D313GQ0MHPM2.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","label":"View source image","provenance":"publisher_page","verification":{"status":"verified","checkedAt":"2026-11-13T19:30:44.099Z","method":"publisher_association_and_head","contentType":"image/webp","cacheUntil":1794598244099},"recommendationReason":"Observed on the acquired publisher source; availability checked."}],"sourceMedia":{"status":"found","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","checkedAt":"2026-11-13T19:30:43.740Z","items":[{"type":"image","url":"https://blog.cloudflare.com/_image?href=https%3A%2F%2Fblog.cloudflare.com%2F_emdash%2Fapi%2Fmedia%2Ffile%2F01M7B3YN6VXD98D313GQ0MHPM2.png&w=1280&h=720&f=webp&fit=cover&position=center","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","attribution":"Cloudflare Blog","basis":"publisher-embed","availability":"verified","verifiedAt":"2026-11-13T19:30:44.099Z"}],"note":"Media declared by the original publisher; availability checked separately from the editorial reading."},"editorialDecision":{"outcome":"accept","reasonCodes":["useful_perspective"],"rubricVersion":"stream-admission-v7","mediaId":"a009bbdbfbe6de47102d4987701da3c8d50cf9713e2c59211ace27845c45dac6","confidence":0.69,"provider":"typesafe","model":"jev-1.13.0","inputHash":"cc55f1554ff117fc9fdd50a029d81da9d75e6dea4ee7130c6ef1e05994a58da3","decidedAt":"2026-11-13T19:30:45.533Z"},"provenance":{"textHash":"66738c383a938709728b0734cb4e14fa915729587301edbe2dad3f8179210d23","observationId":"253630d4a7e34fecac2128c6daaf647e03b7b489fe82a9e69b4297b45f92c09a","retrievedAt":"2026-11-13T19:30:43.740Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"f4731aee-898b-4e8e-8710-6b0cae02ade5"},"reviewer":{"model":"gpt-6-luna","runId":"5fe7023a-38e5-4a68-8bb6-fdfd419613d2"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-13T19:31:46.101Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[],"authorRole":"article-author","hosts":[],"status":"missing","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Cloudflare Blog","url":null,"kind":"unknown","actorId":null},"role":"publisher","scope":{"kind":"publication","locator":null},"literalCredit":"Cloudflare Blog","status":"stated","provenance":{"basis":"article-publisher","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","locator":"document/html[1]/head[0]/script[56]@12289.publisher"},"assertionId":"d8b56cfc8048ce59ee54137303c665ce1dd38a69b9f7d624f9ad9acf6cfe427e:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-13T19:30:43.740Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"d8b56cfc8048ce59ee54137303c665ce1dd38a69b9f7d624f9ad9acf6cfe427e","sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","contentSha256":"99eee86ca5a97066771b719b4186f5a739d30f3b1ce524e1276b6be709f1a36b","textHash":"66738c383a938709728b0734cb4e14fa915729587301edbe2dad3f8179210d23","observedAt":"2026-11-13T19:30:43.740Z"}}],"participationCoverage":{"total":1,"returned":1,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":{"name":"Cloudflare Blog","url":null},"sourceUrl":"https://blog.cloudflare.com/adapting-to-ai-penetration-testing-orchestrators/","snapshotId":"d8b56cfc8048ce59ee54137303c665ce1dd38a69b9f7d624f9ad9acf6cfe427e","contentSha256":"99eee86ca5a97066771b719b4186f5a739d30f3b1ce524e1276b6be709f1a36b","textHash":"66738c383a938709728b0734cb4e14fa915729587301edbe2dad3f8179210d23","observedAt":"2026-11-13T19:30:43.740Z","basis":"publisher-page-metadata","sourceLinks":32,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/a156ba5b1632e000f159ab5e93de2b296808bf097ae2babec246bbbf372f1e83/source"}}}],"audits":[{"publicationId":"e8818e52-9988-442e-8515-bd7e7982cfb0","verdict":"uncertain","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading consistently attributes the trends, incident observations and the Modern Security Model recommendation to Cloudflare, the publisher. It presents them as Cloudflare's reports and arguments, not established fact.","excerpt":"we recommend that all organizations adopt what we call the Modern Security Model"},{"dimension":"summary","status":"uncertain","explanation":"The reading is broadly faithful, but it leaves out a central part of the story: ARTEX's creator took it down on October 8, and Cloudflare argues this likely caused a hydra effect of forks. The minimal repair is one sentence saying so. Penetration testing (authorized simulated attacks), CI/CD and hyperscaler are also left unexplained. A non-specialist may not grasp that offensive security tools are being repurposed for real attacks.","excerpt":"the takedown of ARTEX on October 8 (and widespread reporting of it) likely caused a hydra effect"},{"dimension":"date","status":"pass","explanation":"originalPublished (2026-11-13T19:26:07Z, from the publisher page) matches the feed entry. Nothing in the evidence indicates an earlier first publication.","excerpt":null},{"dimension":"support","status":"pass","explanation":"Each claim matches its excerpt. The reading keeps the source's own qualifier that the activity was lightly guided by a human operator. Its limitations accurately note that the evidence comes from Cloudflare's own vantage point and that the post reports no measured outcomes for the model. The question follows from that gap without asserting an answer.","excerpt":"While we believe that much of this activity was lightly guided by the human operator"},{"dimension":"media","status":"pass","explanation":"The selected media is the verified link to the original Cloudflare blog post. It is the most direct way for readers to access the source.","excerpt":null}],"createdAt":"2026-11-13T19:31:46.101Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}