# Penetration testing: AI helps, I decide

Security galaxy · Cédric Merlin, CTO · https://merlin-cedric.fr/en/securite/cadre-ia/

My method for authorised penetration tests: eight phases that I run myself, with AI to speed up the triage of results.

## The problem

Going faster in penetration testing (attacking a system with permission to find its flaws), without ever losing control of what matters.

## What I did

1. **I frame the mission.** I start from a written authorisation and a precise scope. Nothing begins without them.
2. **I run eight phases.** From information gathering to the final retest, I run each of the eight phases.
3. **AI sorts, I verify.** AI sorts the results and prepares drafts. I verify every finding myself.
4. **I decide.** I choose the targets, I validate each flaw and I write the final report.

## The result

Faster engagements, and every decision stays mine.

Figure: 8 phases that I run end to end.

---
Page: https://merlin-cedric.fr/en/securite/cadre-ia/ · Contact: contact@merlin-cedric.fr