Pen test the system, using AI
I work through the system with AI, trying the ways in an outsider would try. The report says where I managed to get through, what it would expose, and what to do about it, in language a developer can act on. What counts as a real finding stays my call.