<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>ModernPentest Blog</title>
    <link>https://modernpentest.com/blog</link>
    <description>Security guides, best practices, and insights for modern SaaS applications. Learn how to secure your Supabase, Firebase, and Vercel apps.</description>
    <language>en-us</language>
    <lastBuildDate>Tue, 08 Sep 2026 03:07:33 GMT</lastBuildDate>
    <atom:link href="https://modernpentest.com/blog/rss.xml" rel="self" type="application/rss+xml"/>
    <image>
      <url>https://modernpentest.com/logo.png</url>
      <title>ModernPentest Blog</title>
      <link>https://modernpentest.com/blog</link>
    </image>
    
    <item>
      <title><![CDATA[The 9 Best Automated Penetration Testing Tools in 2026 (Honest Comparison)]]></title>
      <link>https://modernpentest.com/blog/best-automated-penetration-testing-tools</link>
      <guid isPermaLink="true">https://modernpentest.com/blog/best-automated-penetration-testing-tools</guid>
      <description><![CDATA[An honest comparison of automated pentesting platforms — ModernPentest, Aikido Attack, Ethiack, Intruder, Detectify, Astra, Beagle Security, Pentera, and OWASP ZAP — with pricing, strengths, and who each one is actually for.]]></description>
      <pubDate>Thu, 11 Jun 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Comparisons]]></category>
      <author>noreply@modernpentest.com (Victor)</author>
    </item>
    <item>
      <title><![CDATA[ModernPentest Is Verified Under Anthropic's Cyber Verification Program]]></title>
      <link>https://modernpentest.com/blog/anthropic-cyber-verification-program</link>
      <guid isPermaLink="true">https://modernpentest.com/blog/anthropic-cyber-verification-program</guid>
      <description><![CDATA[We've been verified under Anthropic's Cyber Verification Program — clearance that lets our AI agents perform real, end-to-end offensive testing without being throttled by default safety refusals. Here's what that means for your security.]]></description>
      <pubDate>Fri, 05 Jun 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Company]]></category>
      <author>noreply@modernpentest.com (Victor)</author>
    </item>
    <item>
      <title><![CDATA[How to Secure a Supabase App Before Launch: Tools That Actually Test It (2026)]]></title>
      <link>https://modernpentest.com/blog/supabase-security-tools</link>
      <guid isPermaLink="true">https://modernpentest.com/blog/supabase-security-tools</guid>
      <description><![CDATA[A practical guide to Supabase security tooling — from Supabase's built-in Security Advisor to supabomb and full AI pentesting — based on our research scanning 107 YC startups, 61% of which were exposing data.]]></description>
      <pubDate>Wed, 03 Jun 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Security Guides]]></category>
      <author>noreply@modernpentest.com (Victor)</author>
    </item>
    <item>
      <title><![CDATA[20 Million Rows Exposed: A Supabase Security Study of YC Startups]]></title>
      <link>https://modernpentest.com/blog/yc-supabase-vulnerability-research</link>
      <guid isPermaLink="true">https://modernpentest.com/blog/yc-supabase-vulnerability-research</guid>
      <description><![CDATA[We scanned 107 Y Combinator startups using Supabase and found alarming security gaps. 28% were exposing PII through misconfigured databases. Here's what we discovered and how to protect your data.]]></description>
      <pubDate>Mon, 26 Jan 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Research]]></category>
      <author>noreply@modernpentest.com (Victor)</author>
    </item>
    <item>
      <title><![CDATA[Introducing Firebomb: Open Source Firebase Penetration Testing]]></title>
      <link>https://modernpentest.com/blog/introducing-firebomb</link>
      <guid isPermaLink="true">https://modernpentest.com/blog/introducing-firebomb</guid>
      <description><![CDATA[Meet Firebomb, our open source CLI for automated security testing of Firebase applications. Test Firestore rules, RTDB permissions, Storage ACLs, and Cloud Functions authentication.]]></description>
      <pubDate>Sat, 10 Jan 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Tools]]></category>
      <author>noreply@modernpentest.com (Victor)</author>
    </item>
    <item>
      <title><![CDATA[Securing Firebase in Production: Complete Security Checklist]]></title>
      <link>https://modernpentest.com/blog/securing-firebase-in-production</link>
      <guid isPermaLink="true">https://modernpentest.com/blog/securing-firebase-in-production</guid>
      <description><![CDATA[A comprehensive guide to securing your Firebase application. Learn how to lock down Firestore rules, RTDB permissions, Cloud Storage, Cloud Functions, App Check, Data Connect, and Genkit.]]></description>
      <pubDate>Sat, 10 Jan 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Security Guides]]></category>
      <author>noreply@modernpentest.com (Victor)</author>
    </item>
    <item>
      <title><![CDATA[Introducing Validation Agents: AI-Verified Findings and Remediation Confirmation]]></title>
      <link>https://modernpentest.com/blog/introducing-validation-agents</link>
      <guid isPermaLink="true">https://modernpentest.com/blog/introducing-validation-agents</guid>
      <description><![CDATA[Meet our new Finding Triage Agent and Remediation Verification Agent. Zero false positives. Verified fixes. Security you can trust.]]></description>
      <pubDate>Mon, 05 Jan 2026 00:00:00 GMT</pubDate>
      <category><![CDATA[Product]]></category>
      <author>noreply@modernpentest.com (Victor)</author>
    </item>
    <item>
      <title><![CDATA[10 Common Supabase Security Misconfigurations (and How to Fix Them)]]></title>
      <link>https://modernpentest.com/blog/supabase-security-misconfigurations</link>
      <guid isPermaLink="true">https://modernpentest.com/blog/supabase-security-misconfigurations</guid>
      <description><![CDATA[Learn how to identify and fix the most dangerous Supabase security misconfigurations that could expose your user data. Includes code examples and remediation steps.]]></description>
      <pubDate>Mon, 08 Dec 2025 00:00:00 GMT</pubDate>
      <category><![CDATA[Security Guides]]></category>
      <author>noreply@modernpentest.com (Victor)</author>
    </item>
    <item>
      <title><![CDATA[Introducing Supabomb: Open Source Supabase Penetration Testing]]></title>
      <link>https://modernpentest.com/blog/introducing-supabomb</link>
      <guid isPermaLink="true">https://modernpentest.com/blog/introducing-supabomb</guid>
      <description><![CDATA[Meet Supabomb, our open source CLI for automated security testing of Supabase applications. Discover RLS bypasses, test storage permissions, and find vulnerabilities before attackers do.]]></description>
      <pubDate>Sun, 07 Dec 2025 00:00:00 GMT</pubDate>
      <category><![CDATA[Tools]]></category>
      <author>noreply@modernpentest.com (Victor)</author>
    </item>
  </channel>
</rss>