Ridge Security Launches RidgeOne, a Self-Contained Appliance for AI Pentesting and Red Teaming

Ridge Security today announced RidgeOne, a self-contained solution that brings autonomous AI-powered penetration testing and agentic red teaming to mid-sized organizations. Combining Ridge Security’s RidgeGen® agentic security validation platform with an open-weight AI model running on NVIDIA DGX Spark, RidgeOne enables organizations to perform deep security testing within their own environment without sending sensitive testing data to an external AI provider or incurring ongoing AI token costs. Ridge Security is also joining the NVIDIA Inception Program, which provides startups with resources and support to help accelerate the development of innovative technologies.

For organizations with limited AI or security resources, accessing advanced security testing capabilities can be a challenge. RidgeOne is designed to make autonomous security testing easier to deploy and more accessible, giving organizations a way to use AI-driven offensive security without having to build their own AI infrastructure or maintain a separate AI environment.

RidgeOne is designed to provide several practical advantages:

  • Easy to deploy. RidgeOne provides AI-powered security testing without requiring organizations to build and maintain separate AI infrastructure.
  • Predictable costs. Running an open-weight model locally eliminates ongoing token costs associated with external AI services.
  • Portable. The appliance can be moved and deployed across different network segments, making it useful for organizations with distributed or segmented environments.
  • Deep security testing. RidgeOne can autonomously test IT infrastructure, networks, web applications, APIs, Active Directory, hosts and IoT/OT environments, including multi-step attack paths.
  • Private by design. Testing activity and sensitive security data remain within the customer’s environment rather than being sent to an external AI provider.

The solution is built around a validated reference configuration based on the NVIDIA DGX Spark compact AI system, with 128 GB of unified memory shared between the AI model and RidgeGen. RidgeOne can be deployed in a VMware environment and brought online in five steps, without requiring customers to build separate AI infrastructure.

In testing, Ridge Security ran RidgeOne against OWASP Juice Shop and completed a full autonomous penetration test without operator involvement. The assessment produced 32 verified findings, including 19 critical and high-severity findings, over approximately 10 hours, without making any external AI calls. The system also connected separate findings into a multi-step attack path.

That ability to connect the dots is central to RidgeGen. Rather than stopping at individual vulnerabilities, the platform can reason across findings, test whether weaknesses can be chained together and provide evidence that security teams can use to prioritize fixes.

As attackers increasingly use AI to automate and accelerate their operations, organizations need ways to put the same technology to work on the defensive side. RidgeOne gives security teams a portable way to bring autonomous testing capabilities into their own environments, whether they are testing a corporate network, a restricted segment or a different environment altogether.

RidgeOne is now available for organizations looking to deploy private, autonomous security testing within their own environments.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading