paperAugust 2026Unreviewed

Agentic Security: A Systematization of Tools, Failure Modes, and Design Laws for LLM-Driven Penetration Testing

Israt Moyeen Noumi, Tarannum Ahmed Nowshin, Md. Mehedi Hasan Nipu, Mohammad Sakib Mahmood, Md. Jakir Hossain, M. F. Mridha

View resource PDF

Abstract

Agentic security uses large-language-model (LLM) agents to plan, dispatch, and interpret security tools. As these systems move from demonstrations to deployed products, practitioners repeatedly encounter the same operational failures. We systematize these failures through a hands-on evaluation of ten widely used static, dynamic, cloud, orchestration, and AI red-teaming tools for unattended pipelines. We introduce a four-dimensional Integration Friction Index that separates one-time engineering c

Framework mappings

NIST AI Risk Management Framework

MEASUREMeasure

Suggested from the entry's categories.

Cite

@misc{noumi2026agentic,
  title = {{Agentic Security: A Systematization of Tools, Failure Modes, and Design Laws for LLM-Driven Penetration Testing}},
  author = {Israt Moyeen Noumi and Tarannum Ahmed Nowshin and Md. Mehedi Hasan Nipu and Mohammad Sakib Mahmood and Md. Jakir Hossain and M. F. Mridha},
  year = {2026},
  month = aug,
  eprint = {2608.21423},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2608.21423}
}