Cobalt Report: Trust in AI Vulnerability Scanning Plummets to 9%

The 2026 Cobalt State of Pentesting Report has revealed a dramatic collapse in enterprise confidence regarding fully automated AI vulnerability scanning, with trust dropping from 29 percent in 2025 down to just 9 percent this year.

This steep decline is primarily driven by a high volume of false negatives. According to the report, 78 percent of cybersecurity professionals surveyed indicated that fully automated AI testing tools had missed critical vulnerabilities, exposing their organizations to unacceptable levels of risk.

The Shift to Hybrid Testing Models

As faith in unguided automation wanes, the industry is seeing a significant pivot toward hybrid testing methodologies. Nearly half of the surveyed organizations have transitioned to models where human expertise complements AI-driven tools, representing a 22-percentage-point increase in hybrid preference year-over-year.

Security experts note that while AI algorithms can process vast amounts of data rapidly, they remain prone to both costly false positives and dangerous false negatives when operating without seasoned human oversight.