Ridge Security Unveils RidgeOne for On-Premises Autonomous Penetration Testing
Ridge Security launches RidgeOne, an autonomous AI-powered penetration testing solution designed for mid-sized organizations, prioritizing data privacy and cost-efficiency by running entirely within customer environments.
Ridge Security has introduced RidgeOne, a new autonomous penetration testing and agentic red teaming solution tailored for mid-sized organizations. This innovative platform integrates Ridge Security's existing RidgeGen agentic security validation platform with an open-weight AI model, all deployed locally on NVIDIA DGX Spark hardware. The core value proposition of RidgeOne is its ability to conduct comprehensive security testing within a customer's own infrastructure, thereby preventing sensitive testing data from being transmitted to external AI service providers and eliminating the ongoing costs associated with AI token usage.
For many organizations, particularly those with limited AI or dedicated security resources, accessing cutting-edge security testing capabilities has been a significant hurdle. RidgeOne aims to democratize autonomous security testing by making it easier to deploy and more accessible. It offers a pathway for organizations to leverage AI-driven offensive security techniques without the substantial investment required to build and maintain their own complex AI infrastructure or separate AI environments.
"AI is fundamentally changing how security teams can approach offensive security, but organizations shouldn't need a larger AI team or a complicated infrastructure project to take advantage of it," stated George Duo, VP of Product Management at Ridge Security. "We built RidgeOne to make autonomous security testing practical for organizations that want access to this technology while keeping control of their data, infrastructure, and testing process."
RidgeOne offers several key advantages for its users. Its ease of deployment means organizations can utilize AI-powered security testing without the burden of building and managing separate AI infrastructure. The solution provides predictable costs by running an open-weight model locally, thereby avoiding the recurring token expenses associated with cloud-based AI services. Furthermore, the appliance is portable, allowing it to be moved and deployed across different network segments, making it suitable for organizations with distributed or segmented environments. The system is capable of deep security testing across IT infrastructure, networks, web applications, APIs, Active Directory, hosts, and IoT/OT environments, including the identification of multi-step attack paths.
Privacy is a central tenet of RidgeOne's design. All testing activity and sensitive security data remain securely within the customer's environment, rather than being sent to an external AI provider. The solution is built upon a validated reference configuration utilizing the NVIDIA DGX Spark compact AI system, which features 128 GB of unified memory shared between the AI model and RidgeGen. RidgeOne can be deployed within a VMware environment and set up in just five steps, eliminating the need for customers to construct their own AI infrastructure.
In practical demonstrations, Ridge Security successfully utilized RidgeOne to perform a full autonomous penetration test against OWASP Juice Shop without any operator intervention. This assessment identified 32 verified findings, including 19 critical and high-severity issues, within approximately 10 hours, all without making external AI calls. A notable capability highlighted was the system's ability to connect separate findings into a cohesive, multi-step attack path.
The RidgeGen platform's strength lies in its ability to reason across individual vulnerabilities, test whether weaknesses can be chained together, and provide actionable evidence for security teams to prioritize remediation efforts. As threat actors increasingly adopt AI to accelerate their operations, organizations are compelled to deploy similar technologies for defense. RidgeOne provides a portable and controlled method for integrating autonomous testing capabilities directly into their own environments, whether for corporate networks, restricted segments, or other critical infrastructure.
"Autonomous security testing is changing what security teams can do, but autonomy has to come with control," emphasized Lydia Zhang, President of Ridge Security. "RidgeOne gives organizations a practical way to bring AI-powered offensive security into their own environments while maintaining control over the data, the infrastructure, and the testing process."