# Penetration testing · Tech watch

[Canonical source](<https://sebastien.rigaux.be/en/tech-watch/tags/penetration-testing>)

Finding vulnerabilities through offensive testing within an authorized scope.

## [CVEngine connects attack-surface discovery with CVE validation](<https://sebastien.rigaux.be/en/tech-watch/links/cvengine-connects-attack-surface-discovery-with-cve-validation>)

CVEngine brings continuous asset discovery, vulnerability scanning, and matching against exploited CVEs into a self-hosted platform. It aims to prioritize flaws that actually apply, using read-only validation and evidence rather than presenting only a list of alerts.

Version 1.3 adds Sentinels to run scans from private networks, along with an OpenVAS integration that is disabled by default. Results feed the same inventory and severity ratings; the tool also provides a REST API and MCP integration.

2026-10-31 · [Markdown](<https://sebastien.rigaux.be/en/tech-watch/links/cvengine-connects-attack-surface-discovery-with-cve-validation.md>) · [Original resource](<https://github.com/hevnsnt/CVEngine>)

## [Strix: automate AI-assisted penetration testing](<https://sebastien.rigaux.be/en/tech-watch/links/strix-automate-ai-assisted-penetration-testing>)

Strix is an open-source tool that uses agents to test an application and report vulnerabilities. Its repository exposes the workflow components for evaluation in an authorized environment.

2026-06-06 · [Markdown](<https://sebastien.rigaux.be/en/tech-watch/links/strix-automate-ai-assisted-penetration-testing.md>) · [Original resource](<https://github.com/usestrix/strix>)

## [Exegol: containerized environments for offensive security](<https://sebastien.rigaux.be/en/tech-watch/links/exegol-containerized-environments-for-offensive-security>)

Exegol provides preconfigured container environments for offensive-security work. This approach gives teams a consistent testing setup without installing every tool on the host.

2026-02-25 · [Markdown](<https://sebastien.rigaux.be/en/tech-watch/links/exegol-containerized-environments-for-offensive-security.md>) · [Original resource](<https://exegol.com/>)

## [AutoPentestX for automated penetration tests and reports](<https://sebastien.rigaux.be/en/tech-watch/links/autopentestx-for-automated-penetration-tests-and-reports>)

AutoPentestX combines offensive testing modules and report generation in a Python repository. The project is early, but shows how an automated penetration-testing workflow is assembled.

2026-02-01 · [Markdown](<https://sebastien.rigaux.be/en/tech-watch/links/autopentestx-for-automated-penetration-tests-and-reports.md>) · [Original resource](<https://github.com/Gowtham-Darkseid/AutoPentestX>)