Your AI Pentester Found an SSRF. Can It Reproduce the Attack?

The first scan found an SSRF. The second one didn't. I wouldn't close the finding just yet. The endpoint accepts a URL, fetches the resource, and returns its response. During the first scan, the agent