HackerOne

TryHackMe is a browser-based cybersecurity learning service with interactive rooms for practicing security concepts, including beginner exercises on finding and exploiting vulnerabilities. It also provides a learning roadmap and offers free learning alongside paid annual subscriptions.

Wiz is an AI cybersecurity platform for cloud and AI applications. It connects code, cloud, identities, network, and runtime in a unified security graph, using that context to scan attack surfaces, model lateral movement, privilege escalation, and data-access paths, detect exploitation, and generate code or infrastructure fixes. The videos describe its customer-side CVE scanning as producing security reports and discuss using agents to remediate vulnerabilities.

CodeRabbit Secure is an AI-powered code-security service from CodeRabbit that monitors repositories and pull requests for vulnerabilities. Its security agents use semantic reasoning to trace attack paths across files, services, and trust boundaries, then verify reachability, exploitability, and blast radius to reduce false positives. It performs automatic reviews on pull requests and supports on-demand or scheduled deep scans of the full codebase, with findings covering issues such as access-control flaws, prompt injection, business-logic errors, injection chains, SSRF, and race conditions. The service can draft fixes for identified vulnerabilities.

Shannon is an open-source autonomous AI penetration-testing tool developed by Keygraph for web applications and APIs. It analyzes source code to map architecture, trust boundaries, data flows, interfaces, dependencies, and potential attack paths, then combines those candidates with live reconnaissance and specialized testing for injection, XSS, SSRF, authentication, and authorization. Exploitation agents use browser automation and command-line tools against a running application to produce reproducible proof-of-concept attacks; candidates that cannot be demonstrated are discarded, so only exploited vulnerabilities become findings. Shannon runs locally from the command line or in CI/CD, including GitHub Actions and GitLab CI/CD, and can test deployed staging or development environments on pull-request, release, or scheduled workflows. It produces evidence-rich PDF and Markdown reports plus JSON and SARIF 2.1.0 output, supports authenticated testing and resumable workspaces, and can gate a pipeline on proven vulnerabilities at configured severity levels. The open-source edition runs in an ephemeral Docker worker, mounts the target repository read-only, stores results locally, and uses credentials supplied for a selected model provider or compatible local endpoint. Shannon is licensed under AGPL-3.0. It actively executes exploits and may mutate application state, so the project requires authorization and recommends sandboxed, staging, or local environments rather than production systems.

HyperProbe is an AI-native production debugger for investigating live application state without code changes, redeployment, or service restarts. It reads logs and distributed traces, uses a coding agent to locate a suspected file and line, and places a temporary read-only virtual breakpoint there. When the breakpoint fires on live traffic, it captures the variable state asynchronously without pausing requests, then uses the evidence to confirm a root cause. Probes are non-blocking, cannot write memory or execute code, disappear after capture, and are recorded in an immutable audit trail. The service is designed for silent failures, exceptions whose causes occur earlier in the call chain, incorrect behavior without thrown errors, race conditions, third-party contract changes, and business-metric failures. It supports JavaScript, TypeScript, Java, Kotlin, Python, and Ruby, and can run in a managed cloud, self-hosted deployment, or private VPC. The page states that it integrates with PagerDuty, Datadog, Slack, Cursor, Claude Code, Codex, and Opencode, with approval gates and agent-side PII redaction.