AI pentesting is treated as orchestration, not magic, with browser agents, shared cookies, per-agent inboxes, scoped proxies, throttles, and multi-account authorization checks. The benchmark claims are less settled because one comparison used a private app and one scan, but the operational setup details are worth the click.