Blog

Field notes on offensive security

How AI is changing penetration testing, what auditors actually want, and how to ship secure fast.

Company·June 18, 2026·4 min

Why we built Uvy

Software ships every day. Penetration tests happen once a year. We built Uvy to close that gap, a pentest that runs as often as you deploy.

Industry·June 16, 2026·5 min

AI just changed the economics of penetration testing

For thirty years the price of a pentest was the price of a person's time. That assumption just broke, and it changes what security teams can demand.

Guide·June 13, 2026·6 min

The vibe-coder's guide to your first SOC 2 pentest

You shipped fast, a customer is asking for SOC 2, and now you need a pentest you didn't plan for. Here's what auditors actually want, minus the jargon.

Engineering·June 11, 2026·5 min

What AI-generated code gets wrong about security

AI writes code that compiles, passes tests, and ships. It also reproduces a predictable set of security mistakes, at scale. Here's the pattern.

Industry·June 9, 2026·4 min

Your annual pentest is already out of date

The report is dated the day it's delivered. Everything you shipped since is untested. Why point-in-time testing stopped matching how software is built.

Guide·June 6, 2026·6 min

How to read a penetration test report

Severity, CVSS, proof-of-exploit, remediation - a plain-English guide to what's in a pentest report and what actually deserves your attention first.

Now booking pentests

Find what an attacker would, first.

Point Uvy at your app or API. It runs a full pentest in isolated infrastructure and returns an audit-ready report with verified, proof-backed findings. First report in days.

Request a pentestHow it works

Or write to [email protected]