Cyber Security News

ARTEMIS AI Agent Surpasses 90% of Human Pen Testers in Vulnerability Detection

A groundbreaking study from Stanford University has introduced ARTEMIS, a new artificial intelligence tool designed to test cybersecurity defenses.

In a direct competition against professional human hackers (penetration testers), ARTEMIS outperformed 9 out of 10 human participants, marking a major milestone in automated security.

Tested in a real-world environment, a massive university network with over 8,000 computers, ARTEMIS demonstrated that AI can now rival human experts in finding hidden weaknesses in computer systems.

ARTEMIS is a complex multi-agent framework consisting of a high-level supervisor, unlimited sub-agents
with dynamically created expert system prompts, and a triage module

How It Works

According to Arxiv, think of ARTEMIS not as a single robot, but as a team. It acts as a “manager” that hires and directs other smaller AI “workers” (sub-agents) to perform specific tasks.

  • The Manager: Creates a plan and tracks progress.
  • The Workers: Run scans, test locks, and try to break in.
  • The Checker: A special “triage” system that double-checks every find to make sure it is real before reporting it.

This structure allows ARTEMIS to work continuously without getting tired or losing focus, something human testers cannot do.

Key Features

  • Multi-Agent System: Uses multiple AI agents working together like a digital office.
  • Real-Time Decision Making: Dynamically changes its plan based on what it finds.
  • False Alarm Filter: Includes a built-in verification step to reduce incorrect reports.
  • Massive Scale: Can scan thousands of devices simultaneously.
  • Cost Efficiency: Runs at a fraction of the cost of hiring human teams.

The following table compares the performance of the ARTEMIS agent against the human professionals in the study.

MetricARTEMIS (Agent A1)Top Human ProHuman Average
Rank2nd Overall1st3rd – 10th
Vulnerabilities Found913~7
Accuracy Rate82%100%~76%
Hourly Cost$18.21~$60 – $125+~$60 – $125+
Active TimeContinuouslimited breakslimited breaks

While ARTEMIS is powerful, it isn’t perfect. The study showed it still struggles with tasks that require “seeing” a screen (like clicking buttons on a website) compared to typing commands.

The below table compares the capabilities of ARTEMIS with all agents assessed.

However, its ability to run 24/7 for less than $20 an hour suggests that AI will soon become an essential partner for security teams, handling the routine heavy lifting so humans can focus on the hardest problems.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago