Will AI replace Penetration Testers?

What this score means

Penetration Testers is among the more exposed roles in Technology. A large share of the work, especially its routine and text-heavy parts, is already within reach of current AI, though the harder judgment calls still need a person. At 62 out of 100 it scores 4 points above the Technology average of 58. Across the 2 sources behind this baseline, individual estimates run from 59 to 66, so the score is a weighted consensus rather than any single figure.

The number is a consensus estimate for the typical version of the role, built from published academic and industry research scored occupation by occupation. It is not a prediction about any individual. How scoring works

What this job actually involves

Exposure follows the work itself rather than the job title, so it is worth seeing what the role is made of. These are the tasks O*NET records for Penetration Testers, most central first, showing 12 of 22.

• 01Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
• 02Collect stakeholder data to evaluate risk and to develop mitigation strategies.
• 03Conduct network and security system audits, using established criteria.
• 04Configure information systems to incorporate principles of least functionality and least access.
• 05Design security solutions to address known device vulnerabilities.
• 06Develop and execute tests that simulate the techniques of known cyber threat actors.
• 07Develop infiltration tests that exploit device vulnerabilities.
• 08Develop presentations on threat intelligence.
• 09Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
• 10Discuss security solutions with information technology teams or management.
• 11Document penetration test findings.
• 12Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.

Task statements from O*NET by the National Center for O*NET Development, used under CC BY 4.0. The tasks are descriptive; the exposure score above is ours.

The research behind this score

This baseline aggregates 2 research sources that scored Penetration Testers for AI and automation exposure. More recent, higher confidence studies carry more weight in the final number.

• 01Anthropic Economic Index 2026 - AI Task Exposure · 2026
• 02GPTs are GPTs: Labor Market Impact Potential of LLMs · 2024

Also covers

Application Security Assessor · Application Security Hacker · Application Security Tester · Certified Hacker · Certified Tester · Consulting Advisory Tester · Cyber Assessment Tester · Cyber Assessor and related titles

More technology occupations

• Actuaries50/100
• Bioinformatics Technicians72/100
• Biostatisticians62/100
• Blockchain Engineers59/100
• Business Intelligence Analysts67/100
• Clinical Data Managers70/100
• Cloud Engineer43/100
• Computer and Information Research Scientists58/100