Who Watches the Robot Hacker?

Who Watches the Robot Hacker? Last week OWASP published something unusual. Not a vulnerability list. Not a top-ten. A governance standard for autonomous penetration testing platforms. The name is APTS, and it asks a question that most people in security haven’t thought about yet: what happens when you give an AI the ability to hack things on its own? The answer, it turns out, is complicated — and the standard itself has problems nobody is talking about. ...

April 19, 2026 · 13 min · Napat Boonsaeng