Human in the Loop

If Aikido identifies more escalation potential for a finding, you can allow to continue the exploitation from the finding details.

Continuing exploitation can create or modify data and may disrupt parts of your application. We strongly recommend running this in a testing environment only.

How to continue exploitation

1

Open your finding details

Open a pentest issue in Aikido and go to Attack Analysis.

2

Click "Exploit Further"

If the finding is eligible, you will see the button Exploit Further.

3

Review the updated analysis

Aikido starts a deeper follow-up run and updates the same finding with the latest escalation and retest results.

Aikido only shows Exploit Further when a finding is eligible for escalation. If you do not see this action, the finding is either not eligible, already escalated, or has no additional escalation potential.

If you used Run now, pay later and your assessment has no High or Critical findings, try Exploit Further on eligible Medium or Low findings before requesting a credit waiver. A finding that looks minor can sometimes be escalated to a higher severity after deeper exploitation.