Definition
A standard for verifying that AI-driven penetration-testing tools are trustworthy — that their findings are real, their coverage is documented and their autonomy is bounded. It gives buyers and auditors a way to judge evidence produced by machines rather than human testers.
Why it matters
As autonomous test tools replace human auditors, an unverified 'AI says we are safe' is no longer enough; assurance standards make those machine-generated claims checkable and defendable.