Are there more people in the penetration testing business who are flooded with emails from AI agents wanting to negotiate scope and purchase a penetration test?

Over the past few weeks, we have received a lot of them - and I mean A LOT - each wilder than the last. Almost all of the emails are from Gmail addresses and none of them have ever been seen or read by a human.

Additionally, almost all of these projects are related to cryptography in some way, such as messengers, crypto wallets, post-quantum stuff, file vaults and attestation tools.

If you are also getting flooded with these, would you mind reaching out to share experiences and maybe discuss them with us?

Might create talk slides about the top ten most absurd agent interactions...

Favorite so far was the agent agreeing to a meeting, then us waiting in the lobby, sending the client a reminder, and some guy entering the call being like "who are you, why am I here!!?"

@cure53 do you have Google Ads (or similar) set up? They tend to burn user credits with similar gmail contacts (this user found you, proving our adtech works).

@cure53 we are getting weird requests, but all seem to involve humans. Not sure it that makes it better...

@buherator No, we have nothing of that kind set up 😅 we believe they ask an LLM and the LLM tells them to contact us.

@mumblegrepper I see I see, for us fully LLM-written without a shadow of doubt. And sometimes three to five per day, weekends too.