HUMANOID

An offensive security agent built for the next generation of security research.
Private beta live.

[HUMANOID @HumanoidSec]

HUMANOID is an offensive security agent you talk to. It walks the app, fires payloads in a real browser, and proves the bug before it reports it.

Private beta now. 🧵

[HUMANOID @HumanoidSec]

@cybermansec Invite-only Linux beta. Request access > https://t.co/LDQMTq0Ftt

[HUMANOID @HumanoidSec]

HUMANOID is an offensive security agent you talk to. It walks the app, fires payloads in a real browser, and proves the bug before it reports it.

Private beta now. 🧵

[HUMANOID @HumanoidSec]

@cybermansec It also tells you plainly when it couldn't prove something. That's the whole point.

[Sam Altman @sama]

GPT-6 Astra is here.

We hope it will begin to enable a new generation of entrepreneurship, scientific discovery, and building.

We believe it is the best model in the world for computer use, professional work, science, coding, cybersecurity, and more.

It took us some extra time to ensure that we could meet the safety and alignment standards required for this capability level, but we think you’ll find it worth the wait.

It scores 98% on FrontierMath Tier 4, 99.9% on ARC-AGI 3, and 100% on ExploitBench.

[Claude @claudeai]

Finally, we’ve improved our safeguards. Our cybersecurity safeguards now flag benign requests about 60% less often.

On basic biology and medical questions, we’ve recently reduced the fallback rate by around 85%.

[HUMANOID @HumanoidSec]

A user's experience with HumanoidProbe!

This walkthrough shows how the tool probes a web app, interprets WAF responses, and classifies observations such as Blocked, Passed, and Reflected—providing insights to guide security testing.

Thanks to @bub_seen for trying it out!

#XSS

[Claude @claudeai]

Fable 5 is back.

[HUMANOID @HumanoidSec]

@cybermansec pip install humanoidprobe

[HUMANOID @HumanoidSec]

HumanoidProbe v1 is live.

The first step in exploring a different approach to web security testing: understanding defensive behaviour, adapting to responses, and learning from observations.

A tool designed to think beyond simple payload execution.

#CyberSecurity #AppSec #WAF

[HUMANOID @HumanoidSec]

Before firing a single payload, it sends a canary string to understand exactly what the WAF allows.

Then it mutates every blocked payload based on real behaviour — not a wordlist.

[ISC2 @ISC2]

A single compromised vendor can trigger widespread #cybersecurity failures. Supply chain risk isn’t optional—it’s essential to resilience.

Explore practical strategies to strengthen collaboration across your ecosystem in the free report from ISC2: https://t.co/LBvj3Hlvka

[HUMANOID @HumanoidSec]

Interesting to see HumanoidProbe being recognized and described online.

What started as a research project has already generated valuable feedback that's helping shape the next evolution of the platform.

#HumanoidProbe #CyberSecurity #CyberSafeLabs

[HUMANOID @HumanoidSec]

Most WAF bypass tools guess.

HumanoidProbe thinks.

🧵

#CyberSafeLabs #BugBounty #XSS #WAF #OffensiveSecurity #Cybersecurity #InfoSec

[HUMANOID @HumanoidSec]

@neerajjj6785 Humanoidprobe: Good for Cyber 😉
https://t.co/P6iiZAqIg6

[HUMANOID @HumanoidSec]

Most WAF bypass tools guess.

HumanoidProbe thinks.

🧵

#CyberSafeLabs #BugBounty #XSS #WAF #OffensiveSecurity #Cybersecurity #InfoSec

[HUMANOID @HumanoidSec]

pip install humanoidprobe
https://t.co/UAj95g2V4r

Humanoid sees what others miss.

[HUMANOID @HumanoidSec]

@minchoi The progress is impressive, but it all starts with someone building the first version. Ship, learn, improve and repeat. 🚀

[HUMANOID @HumanoidSec]

@ravikiran_dev7 CLI side for us. 🖥️
Building security tools that give researchers direct control, visibility and automation from the terminal.
https://t.co/P6iiZArg5E

[HUMANOID @HumanoidSec]

Most WAF bypass tools guess.

HumanoidProbe thinks.

🧵

#CyberSafeLabs #BugBounty #XSS #WAF #OffensiveSecurity #Cybersecurity #InfoSec