I'm building Recon Wave (https://reconwave.com) - we monitor companies online perimeter and let them know when something's wrong.

Recon Wave basically finds and scans all their services - DNS, IPs, Apps, Ports - and notify customers when it breaks some policy (aka. "no ports than 443 should be open") or when some service is straight vulnerable.

I'm former security engineer and I hated all that "critical reports" that reported missing CSP header.

We're now playing with an idea to build LLM pentesting agent that could run agains the whole infra of our customers.