An AI-based penetration testing solution that automatically detects vulnerabilities in operating web services simply by entering a URL has been introduced to a domestic financial group for the first time. As AI-powered cyber attacks in the financial sector become more sophisticated, there is a growing demand for continuous monitoring to complement the limitations of scheduled inspections.

Theori announced on the 3rd that it has supplied its AI-based black box penetration testing solution 'Xint Web' to Woori Financial Group and started operating a continuous security inspection system.

Woori Financial Group is the first domestic financial group to adopt an autonomous AI penetration testing solution.

Xint Web operates by allowing an AI agent to navigate the service like a real user when a URL is entered, identify the endpoint connection structure, and automatically generate multi-faceted penetration scenarios to perform tests.

Theory explained that it can detect high-difficulty vulnerabilities, such as business logic flaws or authentication bypasses that are difficult to find with simple pattern scanning, and has a lower false positive rate compared to existing security scanners.

Another feature is the ability to perform direct inspections in the operating environment without service interruption.

An official from Woori Financial Group stated, “We decided to make preemptive security investments in a situation where cyber threats exploiting AI are becoming more sophisticated,” adding, “We will enhance security reliability by establishing an environment for continuous monitoring of key web applications within the group.”

"It is significant that the technology capable of automatically detecting even complex logic defects meets the strict security standards of the financial sector," said Kwak Kyung-ju, Head of Product at Jint.

Meanwhile, Teori provides security consulting, the AI-based vulnerability detection solution 'Xint', the LLM security solution 'AlphaPrism', and the cybersecurity education platform 'DreamHack' with over 80,000 members to major domestic and international companies such as Google, Microsoft, OKTA, and Samsung Electronics.It provides 'reamhack'.