Opens in a new tab
needsahuman.

Will AI replace penetration testers?

A little.

This job scores 62 out of 100 on (higher is safer). Today people do 88% of the work with AI’s help, and 12% still needs a person.

Updated 3 October 2026 15-1299.04 8143 2026-Q4
Computer and MathematicalPenetration Testers15-1299.04 · 2026-Q4
0% AI does it88% AI helps12% needs a human
Your job's name, lit by the work that still needs a human.Needs a human 12%AI helps 88%AI does it 0%

AI does it: AI can do the task largely by itself. AI helps: a person still does it, faster with AI. Needs a human: AI can do little of it yet.

Each ridge is a slice of the job's task time.Needs a human 12%AI helps 88%AI does it 0%
The job’s mark

No two jobs leave the same print

Every job gets its own fingerprint, drawn from its code. The amber ridges are the share of task time that still needs a person. Below them, the same ridges are written out in ones and zeros: slate for the work AI helps with, white for the work AI can do.

Penetration Testers, O*NET-SOC 15-1299.04. 12% of the job’s task time still needs a human, so 12 of every 100 ridges are amber; slate is what AI helps with, white what AI can do.

What AI can and cannot do

The tasks that make up the job, from , and where AI stands on each today: , (a person does it, with AI speeding it up) or . 12% of the still needs a human.

Each block is one task; its height is its share of working time.Needs a human 12%AI helps 88%AI does it 0%
The job's task list: the parts AI can do are blacked out.Needs a human 12%AI helps 88%AI does it 0%
Document penetration test findings.AI helps
Identify security system weaknesses, using penetration tests.AI helps
Write audit reports to communicate technical and procedural findings and recommend solutions.AI helps
Gather cyber intelligence to identify vulnerabilities.AI helps
Maintain up-to-date knowledge of hacking trends.AI helps
Keep up with new penetration testing tools and methods.AI helps
Identify new threat tactics, techniques, or procedures used by cyber threat actors.AI helps
Conduct network and security system audits, using established criteria.AI helps
Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.AI helps
Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.AI helps
Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.AI helps
Prepare and submit reports describing the results of security fixes.AI helps
Develop and execute tests that simulate the techniques of known cyber threat actors.AI helps
Discuss security solutions with information technology teams or management.Needs a human
Collect stakeholder data to evaluate risk and to develop mitigation strategies.Needs a human
Update corporate policies to improve cyber security.AI helps
Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.Needs a human
Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.AI helps
Develop infiltration tests that exploit device vulnerabilities.AI helps
Design security solutions to address known device vulnerabilities.AI helps
Configure information systems to incorporate principles of least functionality and least access.AI helps
Develop presentations on threat intelligence.AI helps

Is it better than a person? The evidence

No direct test against people in this job yet. Every study is , and vendor studies are labelled as such.

When could it be replaced?

When AI could largely do this job: 2034–2045

Most likely between 2034 and 2045 (8 in 10 of our scenarios). A range from our of how fast AI improves, how fast employers take it up and what holds it back, not a forecast that the job ends. “” has a strict meaning here. Today’s answer is at the top of the page; this is how it could change.

The sand is the human working years left, measured in the same 40-year glass for every job, so a safe trade starts nearly full and an exposed job with a thin layer.

The sand is the human working years left, in the same 40-year glass for every job.Years still needing a humanYears run out

How this job could shift, year by year

Where the job could sit on our scale each year to 2060, across the ten behind its .

Today
Will AI replace this job?
A little.
By 2045
100%
of our scenarios have AI largely doing this job by 2045 (Largely.)
0% still have it mostly needing a person (A little. or Nah.)
By 2060
100%
of our scenarios have AI largely doing this job by 2060 (Largely.)
0% still have it mostly needing a person (A little. or Nah.)

We run this job as ten scenarios spread across its replacement range. In each, the score moves towards the bottom band (Largely: AI could largely do the job) by the year that scenario reaches it, slowly at first and faster later, as adoption usually goes. Each bar splits the ten by the band they put the job in. The model stops at 2060. How the timeline works

Share of this job's scenarios in each verdict band, today to 20600%25%50%75%100%2026: 100.0% of scenarios: AI could do a little of this job (A little.)100%Today2030: 90.0% of scenarios: AI could partly do this job (Partly.)90%2030: 10.0% of scenarios: AI could mostly do this job (Mostly.)10%20302035: 10.0% of scenarios: AI could partly do this job (Partly.)10%2035: 40.0% of scenarios: AI could mostly do this job (Mostly.)40%2035: 50.0% of scenarios: AI could largely do this job (Largely.)50%20352040: 20.0% of scenarios: AI could mostly do this job (Mostly.)20%2040: 80.0% of scenarios: AI could largely do this job (Largely.)80%20402045: 100.0% of scenarios: AI could largely do this job (Largely.)100%20452050: 100.0% of scenarios: AI could largely do this job (Largely.)100%20502055: 100.0% of scenarios: AI could largely do this job (Largely.)100%20552060: 100.0% of scenarios: AI could largely do this job (Largely.)100%2060
Will AI replace the job?Largely.Mostly.Partly.A little.Nah.
Share of this job's scenarios in each band, year by year. Updated with every release.
Show the data
YearLargelyMostlyPartlyA littleNah
Today (2026)0.0%0.0%0.0%100.0%0.0%
20300.0%10.0%90.0%0.0%0.0%
203550.0%40.0%10.0%0.0%0.0%
204080.0%20.0%0.0%0.0%0.0%
2045100.0%0.0%0.0%0.0%0.0%
2050100.0%0.0%0.0%0.0%0.0%
2055100.0%0.0%0.0%0.0%0.0%
2060100.0%0.0%0.0%0.0%0.0%

What’s stopping AI taking over?

The things that keep this work with people, strongest first. Each is scored 0 to 100 from work context, licensing and the evidence we have.

LiabilityMistakes are rated 3.7 out of 5 for consequence and decisions 4.2 out of 5 for impact; someone has to answer for them.
Evidence gapNo study yet compares AI with people doing this job, so employers have no proof it is good enough.
Clients want a personFace-to-face contact is rated 4.1 and physical closeness 2.5 out of 5; caring for or serving people is 1.9 out of 5 in importance.
LicensingUsual entry requirement (BLS): bachelor's degree.
RegulationWorkers rate responsibility for others' health and safety 2.3 out of 5.
Physical work3% of the task time is physical; robots have been shown on 0% of that time.

What would it cost to hand the work to AI?

The share of the year AI could handle (913 of 2,080 hours a year), priced two ways. Both are ranges, not quotes.

AI model usage, a year
$90–$9,130
A person’s wage for the same hours
$24,560–$82,740

AI cost covers model usage only: no integration, licences, oversight or the human time still needed to review the work. Human cost is the wage for the same hours, without benefits or overheads. As of 2026-10.

Robots and humanoids

AI software can only take the work at a screen. The rest needs a robot that can do it.

3%
of the task time is physical work
None needed
the kind of robot the physical work would need
Little of this job is physical, so robotics is not what holds AI back.

Source: Anthropic Economic Index, 'What work can robots do?' (30 September 2026); O*NET 31.0 task weights.

Which AI skills does this job lean on?

The job’s task time split by what an AI model would need to be good at, and where models stand today.

Each star is a task, grouped by the AI skill it leans on.Needs a human 12%AI helps 88%AI does it 0%
Writing · 20.7% of time
Strong
Drafts, edits and translates most routine documents at professional quality.
Analysis · 47% of time
Strong
Reliable on structured data and rules; uneven on judgement calls with thin information.
Coding · 15.8% of time
Strong
Agents complete many routine software tasks end to end; larger systems still need people.
Vision and design · 0% of time
Good
Reads documents, images and layouts well; specialist imaging needs dedicated, approved tools.
Speech · 0% of time
Good
Voice agents handle routine calls and live interpreting; complex or sensitive calls still go to people.
Planning and agents · 4.9% of time
Emerging
Multi-step agents work in narrow, well-tooled workflows; open-ended coordination is unreliable.
Physical manipulation · 3.4% of time
Early
Robots handle structured, repetitive handling; general dexterity outside fixed settings is not commercial.
Care and persuasion · 8.2% of time
Limited
Can script, coach and advise; trust, presence and accountability still need a person.
Amber matter holds its orbit, slate circles the inner disc, white falls in.Needs a human 12%AI helps 88%AI does it 0%
How exposed is it?

Still needs a human: 62/100↑ safer

The amber matter on the outside holds its orbit: that is the task time that still needs a person. The slate matter circling the inner disc is the work AI helps with. The white matter is the share AI can do; it spirals in and is gone over the edge.

The matter follows the job’s task split: 12% needs a human, 88% AI helps, 0% AI does it. Still needs a human: 62/100 ↑ safer. Will AI replace them? A little.

People are asking

How often people ask whether AI will replace this job: on Google, and by estimate, in AI assistants.

In the US

10
Google searches a month, 12-month average to August 2026
Google searches a month, September 2025 to August 2026: from 10 to 10
12
estimated questions to AI assistants in September 2026
Estimated questions to AI assistants a month, October 2025 to September 2026: from 48 to 12
0.02
Google searches a month for every 1,000 people in the job
185th of 197 among all jobs we have search data for

In the UK

10
Google searches a month, 12-month average to August 2026
2
estimated questions to AI assistants in September 2026
2.63
Google searches a month for every 1,000 people in the job in the UK (estimated)
32nd of 197 among jobs we have UK search data for

Source: DataForSEO, US and UK, fetched October 3, 2026. Google figures are Google Ads’ rounded monthly averages. The AI figure is DataForSEO’s estimate from Google’s “People also ask” data, not a count from any AI assistant. UK workers are ONS employment figures matched to this job, so the UK rate per 1,000 is an estimate. Search figures are not part of our open dataset.

What the AIs say

We asked four AI assistants the same question: will AI replace this job in the next 10 years? One word (Yes, Partly or No), then one sentence. Our own answer, from the data: Still needs a human: 62/100 ↑ safer. Will AI replace them? A little.

ChatGPTPartly

AI will automate many repetitive testing tasks and accelerate vulnerability discovery, but human penetration testers will still be needed for creative exploitation, context-aware judgment, ethics, and communicating real business risk.

gpt-5.5-2026-04-23 · asked 2026-10-03
ClaudePartly

AI will automate much of the routine scanning and vulnerability discovery work, but human penetration testers will remain essential for creative exploitation, business-context judgment, and navigating complex, novel attack scenarios.

claude-sonnet-5 · asked 2026-10-03
GeminiPartly

While AI will automate routine vulnerability scanning, exploit generation, and reporting, human penetration testers will remain essential for complex contextual analysis, novel exploit chains, and physical or social engineering assessments.

gemini-3.8-flash · asked 2026-10-03
PerplexityPartly

AI will automate much of the routine work and reduce demand for some roles, but human judgment, creativity, business context, and accountability will likely keep experienced penetration testers essential.

sonar · asked 2026-10-03

Assistants answer from what they learned in training (Perplexity also searches the web), so they can be confidently wrong, and the same question can get a different answer tomorrow. Our score is built from task data and graded evidence. Answers collected through DataForSEO.

Cite this page

NeedsAHuman.com (2026). Will AI replace Penetration Testers? A little. Still needs a human: 62/100, higher is safer; release 2026-Q4. https://needsahuman.com/jobs/penetration-testers/ (accessed 4 October 2026).

Scores change with each , so cite the release. The data is open under : credit NeedsAHuman.com with a link. Open data · Press

Put the badge on your site

The badge updates itself with each release and links back to this page.

Sources

  • Tasks and work context: 31.0, ().
  • Jobs, pay and projections: US , and 2025–35.
  • How AI is used today: ; Microsoft Research, .
  • What AI can do: our task ratings ( r1) and the quality evidence register.
  • UK names and employment: coding index and .

How each score is built: methodology. Every figure on this page: open data. Release 2026-Q4.