# Testing a website faster, without cutting corners

Security galaxy · Cédric Merlin, CTO · https://merlin-cedric.fr/en/securite/pentest-assiste/

Automating the mechanical part of a web penetration test to spend more time on analysis, and verifying every finding by hand.

## The problem

A web penetration test means hours of browsing the site, recording the exchanges, replaying them and documenting everything.

## What I did

1. **Automated crawl.** I automate the crawl of the application, screen by screen.
2. **Everything is recorded.** All exchanges are recorded, within the authorised scope.
3. **A first triage.** Automatic triage discards the noise and flags what deserves my attention.
4. **Replayed, then documented.** I replay and verify every finding before documenting it.

## The result

Less time on the mechanics, more time on analysis. A method I can reuse from one engagement to the next.

## Stack

Automation, Traffic analysis, AI, Manual verification

---
Page: https://merlin-cedric.fr/en/securite/pentest-assiste/ · Contact: contact@merlin-cedric.fr