Terra Security unifies web, AI, and network testing in one agent platform

Agentic attack security platform provider Terra Security Inc. today announced the launch of continuous exploitation validation of network infrastructure, extending its platform beyond web applications and artificial intelligence systems.

Terra’s platform uses a swarm of hundreds of AI agents combined with human reviewers to examine customer environments for exploitable weaknesses. With the addition of network coverage, security teams can examine vulnerabilities across web apps, AI systems, and infrastructure from a single console. Findings are ranked by actual exploitability and business impact, rather than raw severity scores.

This release aims to address the issue where traditional penetration testing treats each surface individually, where one vendor scans a network and another tests a web application or AI system, often not being tested at all. Terra said adversaries are using their own AI tools to increasingly automate reconnaissance and lateral movement, making reports fragmented and slowing remediation.

Network findings are now displayed in a single, connected view along with web and AI vulnerabilities, providing a consistent audit trail for compliance teams. Terra claims that its unified approach can replace multipoint tools and surface multivector attack chains that siled scanners miss.

“When we founded Terra, we believed in the need for continuous, agentic, offensive security across the attack surface,” co-founder and CEO Shahar Peled said in a statement. “AI-powered attackers don’t test one layer at a time, and neither do we.”

Peled added that the expanded platform can now cover web applications, internal applications, AI systems, and network infrastructure under the same agent model with human oversight. Terra currently sells its integration platform to chief information security officers who perform red teaming, application testing, and vulnerability management through a separate vendor.

The introduction of generative AI has increased the external attack surface that enterprises need to test and made pitching easier with each new model integration or third-party application programming interface added. Terra says the agent validates findings for actual exploitability before alerting security teams, and has built-in automatic remediation capabilities for issues that can be fixed without human intervention.

Networking functionality is in public preview for existing Terra Platform customers and general availability has not yet been announced.

Peled spoke with Daniel Bernard, chief business officer of CrowdStrike Holdings Inc., and CJ Moses, chief information security officer and vice president of security engineering at Amazon Web Services Inc., in September at theCUBE, SiliconANGLE Media’s livestream studio. He explained how the company uses offensive security to mimic real-world adversaries and surface things that are actually exploitable, rather than just vulnerabilities.

Image: Terra Security