Major update to the ImmuniWeb AI Platform: new features in Q3 2026

Security evolution with ImmuniWeb AI Platform

ImmuniWeb developers continue to enhance their solutions. In Q3 2026, a major update package was introduced across the entire product portfolio powered by artificial intelligence. The new capabilities are designed to provide holistic coverage of emerging attack vectors and significantly accelerate vulnerability detection processes.

Key ImmuniWeb product updates

ImmuniWeb Discovery

• AI infrastructure: Enhanced detection of exposed AI infrastructure.
• Data leakage: New dedicated incident type for stolen credit cards and monitoring of AI training datasets for leaked or unlawfully scraped data.
• Asset attribution: New in-house AI models introduced to better attribute IT asset ownership.
• Risk management: New dedicated Third-Party Risk Management (TPRM) dashboard.
• Threat monitoring: Customizable alerts for the Cyber Threat Intelligence (CTI) dashboard and advanced search of past alerts.
• Brand protection: Improved detection of phishing and domain squatting incidents.

ImmuniWeb Neuron

• Attack simulation: New in-house AI models for simulating chained attacks and advanced business logic testing.
• Security standards: Ongoing migration to the latest OWASP ASVS v5.0 standard.
• Configuration discovery: Advanced search for AI-related misconfigurations and leaked tokens.
• Efficiency: 20% increase in intelligent crawling and prioritized testing.

ImmuniWeb Neuron Mobile

• Scanning speed: 30% increase in scanning speed for iOS and Android mobile applications.
• File support: Broader support for multiple versions of aab, apk, and ipa binary files.
• New checks: Additional security and encryption checks under OWASP MASVS v2.
• Reporting: Fully revised scan reports with unified exploitation examples and an enhanced Software Composition Analysis (SCA) module.

Penetration testing products

• Executive reporting: Fully revised Executive Summary for each report.
• AI assistance: New in-house AI models to assist penetration testers in real time, accelerate single-page application (SPA) analysis, and reverse-engineer API schemas.
• Remediation: Improved context-based and environment-based remediation guidance.
• Accreditation: Achieved prestigious CREST accreditation for AI-enabled penetration testing.

Integrations and strategic vision

In addition to major product updates, the platform received new integrations, including single sign-on support via Ping Identity for seamless operation within the DevSecOps ecosystem.

Today, AI-powered attacks create a lot of fear, uncertainty and doubt (FUD) fostered by hype in the media. However, what has really changed is both the speed and scale of well-known hacking techniques. This major update addresses exactly those issues: ensuring holistic coverage of emerging attack vectors and exploitation techniques, while boosting the speed of detection, exploitation, and validation. The ultimate goal is to help our customers outpace AI-equipped cyber-threat actors. Human intelligence remains an indispensable ingredient, and being among the first 10 companies in the world with a corporate "AI-Enabled Penetration Testing" accreditation by CREST convincingly demonstrates that our innovation is married with compliance and safe use of AI. (Dr. Ilia Kolochenko, Chief Architect & CEO at ImmuniWeb)