RunSybil

### Overview Ari Herbert Voss, CEO of RunSybil, presents a pitch on transforming the traditional penetration testing process into an automated, product-driven experience powered by large language models (LLMs). The talk addresses the long-standing pain points associated with legacy pen testing services—such as tedious scoping, scheduling delays, inexperienced consultants, lack of transparency, and fluff-filled PDF deliverables—and introduces RunSybil's automated agent, Sybil, as a faster, more controllable alternative.

### Key Topics - **Flaws of Traditional Pen Testing**: The speaker highlights the friction in finding a vendor, negotiating scope and pricing, receiving junior consultants who rely on basic checklists, and dealing with boiler-plate PDF reports designed primarily for compliance rather than genuine security. - **The RunSybil Platform and Sybil Agent**: Customers sign up via the website, define scope directly on the platform, and initiate testing with the push of a button without interacting with consulting staff. - **Benefits of LLM-Driven Testing**: Using LLMs enables faster execution, real-time visibility into active tests, full execution traces, self-service retesting without scheduling hurdles, and effective vulnerability prioritization to cut through scanning noise and false positives. - **Founding Team Background**: The presenter details the company's technical foundation, contrasting it with simple scanner wrappers or labor arbitrage models.

### Technical Details - **Automation via LLMs**: RunSybil leverages LLMs to automate low-skilled, labor-intensive components of offensive security, specifically identifying application functionality and testing configurations. - **Auditability and Traceability**: The platform produces an execution trace showing exactly what was tested, allowing users to verify findings and see tests run in real time. - **Founding Expertise**: Ari Herbert Voss was the first security hire at OpenAI, a Harvard PhD dropout, and a core contributor to GPT-3 and Codex. Co-founder Vlad Ionescu built Meta's Red Team over seven years, founded Red Team X (Meta's equivalent to Project Zero for third-party vulnerabilities), and previously developed offensive security tools using Meta's LLaMA models.

### Takeaways RunSybil aims to deliver actual security rather than mere compliance by packaging top-tier offensive security expertise into a scalable software product. By automating routine scoping, configuration testing, and verification through LLMs, the platform allows organizations to obtain faster, transparent, and reproducible pen test results without reliance on traditional consulting firms.