Redpoint Security Surveyor is Surveyor is an AI-driven application security testing tool built by Redpoint Security that continuously tests applications for authorization, business logic, IDOR, and multi-step workflow vulnerabilities - the classes of risk that traditional scanners and DAST tools are not designed to detect.
The product maps an application's attack surface by ingesting endpoints, specs, and uploads from multiple sources, including a Burp Suite extension, a browser shim for single-page applications, an LLM-driven crawler, and Swagger/OpenAPI uploads. AI analyzers then reason about authentication, authorization, IDOR, and business logic issues that require understanding identity and state rather than pattern matching.
Rather than reporting potential issues, Surveyor chains multi-step exploitation across requests to reproduce attacker behavior and validates findings through live exploitation where the vulnerability class permits. Each assessment concludes with a Redpoint Security consultant reviewing and attesting to the results before they are delivered.
Surveyor integrates with existing engineering workflows, including issue trackers such as Jira and Linear, and adapts to changes in the application over time. It also produces a Pentest Bill of Materials, an exportable record of what was tested, what was reached, and what was proven, which can serve as an evidence trail for audit and compliance frameworks such as PCI DSS 4.0.
The vendor positions Surveyor as complementary to existing scanners and DAST pipelines rather than a replacement, and states it is the same engine used internally by Redpoint Security's own penetration testing consultants on client engagements.
AI-driven continuous testing for authorization, business logic, and IDOR flaws with proof of exploit, developed by Redpoint Security. It is a Application Security solution designed to help security teams with Penetration Testing Framework, Vulnerability, Continuous Testing.
