@codeant-security

Amartya Jha

@codeant-securitySan Francisco, United StatesJoined August 2026

Sharing thoughts on code, code security and more. @CodeAnt

Website

About

Nothing here yet.

Available for

Nothing here yet.

Amartya Jha's blogs

Security Research — CodeAnt AIsecurity-research.hashnode.dev23 posts

Articles Comments

Recently published

AJAmartya Jhasecurity-research.hashnode.dev7h ago · 6 min read

Your Perimeter Will Fail. The Real Question Is How Far an Attacker Gets After.

TL;DR: External tests and scanners check your perimeter. Neither answers the question that decides how bad a breach gets: once someone is inside, how far can they go? That is what internal penetration

AJAmartya Jhasecurity-research.hashnode.dev7h ago · 8 min read

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line.

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line. TL;DR: External penetration testing still matters, but the classic once-a-year model has six structural gaps that hurt

AJAmartya Jhasecurity-research.hashnode.dev1d ago · 7 min read

I Automated Copilot Code Review on Every Pull Request. Here's What It Still Can't Do

The setup takes twenty minutes. The limitations take longer to notice. The first time I turned on Copilot code review, I watched it comment on a pull request within ninety seconds, felt genuinely imp

AJAmartya Jhasecurity-research.hashnode.devSep 9 · 13 min read

Why Your $6,500 Penetration Test Will Cost You More Than the $47,000 One

Two penetration testing quotes land in your inbox. One says $6,500. The other says $22,000. Both vendors say they use AI. Both promise comprehensive coverage. Both have credible-looking reports, exper

AJAmartya Jhasecurity-research.hashnode.devSep 9 · 25 min read

External Penetration Testing in 2026: A Technical Methodology, Tool Stack, and Attack Surface Guide

External penetration testing is often reduced to a familiar sequence: nmap → nuclei → Burp → report That workflow is useful, but it misses the hardest part of the engagement. Finding the assets worth

Amartya Jha

About

Available for

Amartya Jha's blogs

Recently published

Your Perimeter Will Fail. The Real Question Is How Far an Attacker Gets After.

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line.

I Automated Copilot Code Review on Every Pull Request. Here's What It Still Can't Do

Why Your $6,500 Penetration Test Will Cost You More Than the $47,000 One

External Penetration Testing in 2026: A Technical Methodology, Tool Stack, and Attack Surface Guide

Search Hashnode

Amartya Jha

About

Available for

Amartya Jha's blogs

Recently published

Your Perimeter Will Fail. The Real Question Is How Far an Attacker Gets After.

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line.

I Automated Copilot Code Review on Every Pull Request. Here's What It Still Can't Do

Why Your $6,500 Penetration Test Will Cost You More Than the $47,000 One

External Penetration Testing in 2026: A Technical Methodology, Tool Stack, and Attack Surface Guide