---
title: What is Edgescan Atomic?
description: Atomic is an autonomous, Agentic penetration testing capability that investigates your web applications and APIs the way a real-world attacker would, sitting between automated scanning and human-led penetration testing.
---

[Skip to content](https://kb.edgescan.com/knowledge/what-is-edgescan-atomic#main-content)

English

Show submenu for translations

[![Edgescan Cybersecurity Platform | EASM + RBVM + PTaaS](https://kb.edgescan.com/hs-fs/hubfs/Logos/23LOGOS-thicker/Edgescan-Logo-Black.png?width=200&height=40&name=Edgescan-Logo-Black.png)](https://www.edgescan.com/)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations

 Search the Edgescan knowledge base

- There are no suggestions because the search field is empty.

1. [Help Center](https://kb.edgescan.com/knowledge?hsLang=en)
2. [Agentic PTaaS](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en)
3. [Overviews and Concepts](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#overviews-and-concepts)

# What is Edgescan Atomic?

## Atomic is an autonomous, Agentic penetration testing capability that investigates your web applications and APIs the way a real-world attacker would, sitting between automated scanning and human-led penetration testing.

Version Number: v1.0.0

Published Date: 24 Sep 2026

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

### What is Edgescan Atomic?

Edgescan Atomic adds an autonomous investigation layer to application security testing. Powered by agentic frontier AI models and synchronised with Edgescan's enterprise data lake of more than 20 million verified vulnerabilities, Atomic executes continuous, context-aware attack paths, chaining multiple weaknesses together to surface exposures that neither a scanner nor an occasional pen test would reach on its own.

Where an automated scanner checks for known weaknesses one at a time, Atomic reasons across your application: it uses existing scan evidence as a starting point, forms hypotheses about where deeper flaws might live, and investigates them autonomously. This gives you deeper technical insight than authenticated automated scanning (DAST) alone, while preserving a clear escalation path to human-led Advanced PTaaS when a finding needs proven exploitability or expert judgement.

### **Where Atomic fits.**

Atomic sits between two things you may already run. Automated scanning (DAST & NVM) gives you fast, continuous, fixed-cost coverage of known weaknesses. Human-led penetration testing (Advanced PTaaS) gives you expert depth, periodically. Atomic works in the space between them, deeper than authenticated scanning alone, available on demand, with a clear escalation path to human-led testing when a finding calls for it. It's designed to strengthen your testing programme between expert-led pen tests, not to replace them.

Atomic is not a replacement for your scanner or for a certified manual penetration test. It is the connective layer between them, designed to light up the risk that lives in the gap.

### **What Atomic gives you**

- Deeper, adversary-style investigation of web apps and APIs, beyond one-at-a-time scanning.
- Findings anchored to your existing validated scan data.
- Machine-provable findings validated in hours, with full provenance

- [Getting Started](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#main-content)

    - [Quick Start](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#quick-start)
    - [Prerequisites & Network Requirements](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#prerequisites-network-requirements)
    - [Compliance Context](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#compliance-context)
- [Attack Surface Management](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#main-content)

    - [Concepts](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#concepts)
    - [Discovery Methods](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#discovery-methods)
    - [Asset Inventory](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#asset-inventory)
- [Vulnerability Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#main-content)

    - [Enabling & Disabling Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#enabling-disabling-scanning)
    - [Scope & Targeting](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scope-targeting)
    - [Setting Authentication](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#setting-authentication)
    - [DAST Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#dast-scanning)
    - [API Settings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#api-settings)
    - [Scanning Complex Workflows](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scanning-complex-workflows)
    - [Vulnerability Risk Ratings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#vulnerability-risk-ratings)
    - [Additional Configurations](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#additional-configurations)
- [Agentic PTaaS](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#main-content)

    - [Overviews and Concepts](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#overviews-and-concepts)
    - [Using Atomic](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#using-atomic)
    - [Safety and Privacy](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#safety-and-privacy)
- [Human PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#main-content)

    - [Concepts & Methodologies](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#concepts-methodologies)
    - [Scheduling PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#scheduling-ptaas)
- [Platform Usage](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#main-content)

    - [Platform Navigation](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#platform-navigation)
    - [Asset Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-management)
    - [Vulnerability Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#vulnerability-management)
    - [License Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#license-management)
    - [Credentials Vault](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#credentials-vault)
    - [Asset Blockers](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-blockers)
    - [Reporting & Dashboards](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#reporting-dashboards)
    - [AI Insights](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#ai-insights)
    - [Compliance & Frameworks](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#compliance-frameworks)
    - [Additional License Details](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#additional-license-details)
- [Platform Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#main-content)

    - [Notifications & Events](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#notifications-events)
    - [Internal/Private Testing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#internal-private-testing)
    - [API & Authentication](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#api-authentication)
    - [Scheduled Exports](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#scheduled-exports)
    - [Cloud Platforms](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloud-platforms)
    - [CloudHook](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloudhook)
    - [ITSM & Ticketing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#itsm-ticketing)
    - [SIEM & SOAR](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#siem-soar)
    - [CI/CD & DevOps](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#ci-cd-devops)
    - [Communication Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#communication-automation)
    - [Other Automations](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#other-automations)
- [Organization Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#main-content)

    - [Organization Setup](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-setup)
    - [User Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#user-administration)
    - [Roles Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#roles-administration)
    - [Account Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#account-settings)
    - [Organization Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-settings)
- [Updates & Announcements](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#main-content)

    - [2026 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2026-updates)
    - [2025 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2025-updates)
    - [2024 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2024-updates)
    - [2023 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2023-updates)
    - [API Changes](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#api-changes)
    - [OWASP API 2019](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#owasp-api-2019)

[![Chill listening crop-3](https://kb.edgescan.com/hs-fs/hubfs/Edgescan-blac-logo.webp?width=68&height=55&name=Edgescan-blac-logo.webp "Chill listening crop-3")](https://www.edgescan.com)

Copyright © 2026 Edgescan. All rights reserved.