--- title: What is Edgescan Atomic? description: Atomic is an autonomous, Agentic penetration testing capability that investigates your web applications and APIs the way a real-world attacker would, sitting between automated scanning and human-led penetration testing. --- [Skip to content](https://kb.edgescan.com/knowledge/what-is-edgescan-atomic#main-content) English Show submenu for translations [![Edgescan Cybersecurity Platform | EASM + RBVM + PTaaS](https://kb.edgescan.com/hs-fs/hubfs/Logos/23LOGOS-thicker/Edgescan-Logo-Black.png?width=200&height=40&name=Edgescan-Logo-Black.png)](https://www.edgescan.com/) Open main navigation Close main navigation - English Show submenu for translations Search the Edgescan knowledge base - There are no suggestions because the search field is empty. 1. [Help Center](https://kb.edgescan.com/knowledge?hsLang=en) 2. [Scanning & Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en) 3. [Agentic PTaaS](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#agentic-ptaas) # What is Edgescan Atomic? ## Atomic is an autonomous, Agentic penetration testing capability that investigates your web applications and APIs the way a real-world attacker would, sitting between automated scanning and human-led penetration testing. Version Number: v1.0.0 Published Date: 24 Sep 2026 \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ ### What is Edgescan Atomic? Edgescan Atomic adds an autonomous investigation layer to application security testing. Powered by agentic frontier AI models and synchronised with Edgescan's enterprise data lake of more than 20 million verified vulnerabilities, Atomic executes continuous, context-aware attack paths, chaining multiple weaknesses together to surface exposures that neither a scanner nor an occasional pen test would reach on its own. Where an automated scanner checks for known weaknesses one at a time, Atomic reasons across your application: it uses existing scan evidence as a starting point, forms hypotheses about where deeper flaws might live, and investigates them autonomously. This gives you deeper technical insight than authenticated automated scanning (DAST) alone, while preserving a clear escalation path to human-led Advanced PTaaS when a finding needs proven exploitability or expert judgement. ### **Where Atomic fits.** Atomic sits between two things you may already run. Automated scanning (DAST & NVM) gives you fast, continuous, fixed-cost coverage of known weaknesses. Human-led penetration testing (Advanced PTaaS) gives you expert depth, periodically. Atomic works in the space between them, deeper than authenticated scanning alone, available on demand, with a clear escalation path to human-led testing when a finding calls for it. It's designed to strengthen your testing programme between expert-led pen tests, not to replace them. Atomic is not a replacement for your scanner or for a certified manual penetration test. It is the connective layer between them, designed to light up the risk that lives in the gap. ### **What Atomic gives you** - Deeper, adversary-style investigation of web apps and APIs, beyond one-at-a-time scanning. - Findings anchored to your existing validated scan data. - Machine-provable findings validated in hours, with full provenance - [Getting Started](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#main-content) - [Quick Start Checklist](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#quick-start-checklist) - [Onboarding](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#onboarding) - [Training & References](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#training-references) - [Platform Overview](https://kb.edgescan.com/knowledge/platform-overview?hsLang=en#main-content) - [Platform Navigation](https://kb.edgescan.com/knowledge/platform-overview?hsLang=en#platform-navigation) - [Asset Management](https://kb.edgescan.com/knowledge/platform-overview?hsLang=en#asset-management) - [API Configuration](https://kb.edgescan.com/knowledge/platform-overview?hsLang=en#api-configuration) - [Events & Notifications](https://kb.edgescan.com/knowledge/platform-overview?hsLang=en#events-notifications) - [Accessibility Functions](https://kb.edgescan.com/knowledge/platform-overview?hsLang=en#accessibility-functions) - [Asset Tags](https://kb.edgescan.com/knowledge/platform-overview?hsLang=en#asset-tags) - [Asset Audit Trails](https://kb.edgescan.com/knowledge/platform-overview?hsLang=en#asset-audit-trails) - [Dashboards](https://kb.edgescan.com/knowledge/platform-overview?hsLang=en#dashboards) - [Scanning & Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#main-content) - [Scanning](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#scanning) - [Internal Testing Via Jumpbox](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#internal-testing-via-jumpbox) - [Scope Configuration](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#scope-configuration) - [API Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#api-testing) - [Penetration Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#penetration-testing) - [Authenticated Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#authenticated-testing) - [Mobile Application Security Testing](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#mobile-application-security-testing) - [Scheduling Scans](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#scheduling-scans) - [Retesting](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#retesting) - [Agentic PTaaS](https://kb.edgescan.com/knowledge/scanning-testing?hsLang=en#agentic-ptaas) - [Vulnerability Management](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#main-content) - [SLA Settings](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#sla-settings) - [False Positives & Negatives](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#false-positives-negatives) - [Vulnerability Risk Ratings](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#vulnerability-risk-ratings) - [Generating a retest link](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#generating-a-retest-link) - [Discarding Vulnerabilities](https://kb.edgescan.com/knowledge/vulnerability-management?hsLang=en#discarding-vulnerabilities) - [Attack Surface Management](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#main-content) - [What is ASM?](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#what-is-asm) - [Creating a new Investigation](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#creating-a-new-investigation) - [API Discovery](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#api-discovery) - [Artificial Intelligence](https://kb.edgescan.com/knowledge/artificial-intelligence?hsLang=en#main-content) - [Getting Started](https://kb.edgescan.com/knowledge/artificial-intelligence?hsLang=en#getting-started) - [AI Insight Categories](https://kb.edgescan.com/knowledge/artificial-intelligence?hsLang=en#ai-insight-categories) - [Reporting](https://kb.edgescan.com/knowledge/reporting?hsLang=en#main-content) - [Scheduled Exports](https://kb.edgescan.com/knowledge/reporting?hsLang=en#scheduled-exports) - [Creating reports](https://kb.edgescan.com/knowledge/reporting?hsLang=en#creating-reports) - [PCI Attestation Reporting](https://kb.edgescan.com/knowledge/reporting?hsLang=en#pci-attestation-reporting) - [Licence Management](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#main-content) - [Licence Coverage](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-coverage) - [Licence Reporting](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-reporting) - [Licence Suggestions](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-suggestions) - [Licence Optimization](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-optimization) - [Licence Auto-Renewals](https://kb.edgescan.com/knowledge/licence-management?hsLang=en#licence-auto-renewals) - [Integrations](https://kb.edgescan.com/knowledge/integrations?hsLang=en#main-content) - [API Documentation](https://kb.edgescan.com/knowledge/integrations?hsLang=en#api-documentation) - [Splunk](https://kb.edgescan.com/knowledge/integrations?hsLang=en#splunk) - [Microsoft](https://kb.edgescan.com/knowledge/integrations?hsLang=en#microsoft) - [Amazon](https://kb.edgescan.com/knowledge/integrations?hsLang=en#amazon) - [DevOps & CI/CD](https://kb.edgescan.com/knowledge/integrations?hsLang=en#devops-ci-cd) - [Atlassian](https://kb.edgescan.com/knowledge/integrations?hsLang=en#atlassian) - [DefectDojo](https://kb.edgescan.com/knowledge/integrations?hsLang=en#defectdojo) - [ServiceNow](https://kb.edgescan.com/knowledge/integrations?hsLang=en#servicenow) - [Slack](https://kb.edgescan.com/knowledge/integrations?hsLang=en#slack) - [Palo Alto](https://kb.edgescan.com/knowledge/integrations?hsLang=en#palo-alto) - [Axonius](https://kb.edgescan.com/knowledge/integrations?hsLang=en#axonius) - [Google](https://kb.edgescan.com/knowledge/integrations?hsLang=en#google) - [FreshServices](https://kb.edgescan.com/knowledge/integrations?hsLang=en#freshservices) - [Cisco](https://kb.edgescan.com/knowledge/integrations?hsLang=en#cisco) - [Salesforce](https://kb.edgescan.com/knowledge/integrations?hsLang=en#salesforce) - [Zapier](https://kb.edgescan.com/knowledge/integrations?hsLang=en#zapier) - [User Administration](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#main-content) - [Users Quickstart](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#users-quickstart) - [Roles Management](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#roles-management) - [User Account Management](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#user-account-management) - [Account Settings](https://kb.edgescan.com/knowledge/user-administration?hsLang=en#account-settings) - [Advanced Features & Customizations](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#main-content) - [JumpBox Deployment](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#jumpbox-deployment) - [Asset Prioritization](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#asset-prioritization) - [Notification Systems](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#notification-systems) - [Organization Settings](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#organization-settings) - [CloudHook](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#cloudhook) - [Scanning by AWS tags](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#scanning-by-aws-tags) - [WAF Rule Generation](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#waf-rule-generation) - [Edgescan Atomic](https://kb.edgescan.com/knowledge/advanced-features-customizations?hsLang=en#edgescan-atomic) - [Security Best Practices](https://kb.edgescan.com/knowledge/security-best-practices?hsLang=en#main-content) - [Secure Coding Guidelines](https://kb.edgescan.com/knowledge/security-best-practices?hsLang=en#secure-coding-guidelines) - [Security Testing](https://kb.edgescan.com/knowledge/security-best-practices?hsLang=en#security-testing) - [Troubleshooting & FAQs](https://kb.edgescan.com/knowledge/troubleshooting-faqs?hsLang=en#main-content) - [Hosting Information](https://kb.edgescan.com/knowledge/troubleshooting-faqs?hsLang=en#hosting-information) - [Asset Blockers](https://kb.edgescan.com/knowledge/troubleshooting-faqs?hsLang=en#asset-blockers) - [Approaches & Accreditations](https://kb.edgescan.com/knowledge/approaches-accreditations?hsLang=en#main-content) - [Continuous Threat Exposure Management (CTEM)](https://kb.edgescan.com/knowledge/approaches-accreditations?hsLang=en#continuous-threat-exposure-management-ctem) - [Application Security Posture Management (ASPM)](https://kb.edgescan.com/knowledge/approaches-accreditations?hsLang=en#application-security-posture-management-aspm) - [Accreditations](https://kb.edgescan.com/knowledge/approaches-accreditations?hsLang=en#accreditations) - [Updates & Announcements](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#main-content) - [2026 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2026-updates) - [2025 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2025-updates) - [2024 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2024-updates) - [2023 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2023-updates) - [API Changes](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#api-changes) [![Chill listening crop-3](https://kb.edgescan.com/hs-fs/hubfs/Edgescan-blac-logo.webp?width=68&height=55&name=Edgescan-blac-logo.webp "Chill listening crop-3")](https://www.edgescan.com) Copyright © 2026 Edgescan. All rights reserved.