Hey HN - it's time for our annual pen test.

We typically work with a 3rd party security firm each year, but now I'm wondering if there are more efficient and more AI-native options that people are using? It seems like a clear use-case for agents. Does anyone have experience working with a product/vendor in the space?