ITSEC Asia launches Bronyx AI for automated testing

ITSEC Asia has launched Bronyx AI, an AI-assisted automated penetration testing platform, marking the Indonesian cybersecurity company's move into AI technology development.

Bronyx AI is designed to test authorised systems and produce security assessment reports while keeping cybersecurity professionals involved in the process. The platform can assess web applications, APIs and defined network ranges.

It uses AI agents to carry out network reconnaissance, vulnerability assessment, configuration review, and testing of web applications and APIs. It also generates reports with CVSS scoring and remediation recommendations.

According to ITSEC Asia, Bronyx AI differs from conventional vulnerability scanners because its AI agents analyse results and recommend the next testing steps rather than simply identifying weaknesses. In laboratory testing, the platform completed full scans in as little as 14 minutes, with total assessment times ranging from 14 minutes to four hours depending on the scope and complexity of the systems under review.

The launch comes as companies face growing pressure to test digital systems more quickly as cyber threats and software development both accelerate. Automated tools have become more common in security operations, but many organisations still rely on specialist teams to validate findings and assess risk.

Patrick Dannacher, President Director of ITSEC Asia, said the launch was intended to address that gap.

"Technology and cyber threats are evolving faster than ever. Digital infrastructure and services are constantly changing, while security testing continues to require significant time and specialized expertise. Through Bronyx AI, we want to help organizations complete security testing in hours while maintaining the involvement and validation of experienced cybersecurity professionals," said Dannacher.

Bronyx AI was built from experience gathered by ITSEC Asia's penetration testing teams across several industries and markets. ITSEC Asia has operated in cybersecurity for more than 16 years and says it has more than 400 personnel across Indonesia, Singapore, Australia, Mauritius and Dubai.

Human oversight

A central part of the platform's design is what ITSEC Asia describes as a Human in the Loop approach. High and critical-risk findings are validated by its consultants before reports are delivered to customers.

That model reflects a broader debate in cybersecurity over how far AI can replace manual work in sensitive testing and assurance processes. Security teams have increasingly adopted automation to handle repetitive tasks, but many businesses and regulators still expect human review when systems produce serious findings or recommendations.

Dannacher said the company had tried to embed that balance in the new product.

"Bronyx AI was built from the real-world experience of ITSEC Asia's cybersecurity teams across multiple industries and markets. We have translated those experiences into AI technology while ensuring cybersecurity professionals remain an integral part of the testing process. For us, AI-driven speed must always be accompanied by high-quality findings, sound analysis and professional accountability," said Dannacher.

Data controls

ITSEC Asia said each Bronyx AI assessment is carried out only on assets covered by written authorisation and an agreed testing scope. It added that customer assessment data is stored separately, while keys and credentials are encrypted.

The company also said assessment data is not used to train AI models without written customer consent. Bronyx AI can be deployed as a cloud service or within a customer's own environment for organisations with stricter data governance requirements.

Those controls address a sensitive issue for companies considering AI-based security tools. Many businesses remain cautious about where testing data is stored, how it is segregated from other customer information, and whether proprietary or sensitive material could be used in model training.

The launch event in Jakarta was attended by Indonesian government and industry figures, including Edwin Hidayat Abdullah, Director General of Digital Ecosystem at the Ministry of Communication and Digital Affairs. He linked the product to wider efforts to expand domestic technology development alongside stronger cyber defences.

"Artificial intelligence presents tremendous opportunities for Indonesia's digital economy, while also introducing new challenges that must be anticipated, including in cybersecurity. We appreciate the efforts of Indonesian technology companies such as ITSEC Asia in developing AI-based technologies that address real industry needs. Initiatives like Bronyx AI demonstrate the capability of Indonesia's technology ecosystem to create solutions that are relevant domestically while strengthening the nation's competitiveness on the global stage," said Abdullah.

ITSEC Asia said Bronyx AI reflects the company's direction as it builds software products alongside its existing cybersecurity services.

"The launch of Bronyx AI reflects the direction ITSEC Asia is taking as a company. We are building on our cybersecurity expertise to develop AI-powered technologies that solve real security challenges for organizations," said Dannacher.