---
title: "Sandboxes for AI pentest agents: a fresh target per attempt"
description: "Promigence lets offensive-security agents fork a fresh, identical copy of a prepared target for every attempt, behind an outbound allow-list."
url: "https://www.promigence.ai/for/ai-pentest"
site: "Promigence"
---

# AI pentest agents that attack a fresh copy of the target every time

Promigence lets an offensive-security agent fork the same prepared target as many times as it needs, so every exploit attempt starts from an identical, clean state, behind an outbound allow-list.

**Who this is for:** Teams building AI penetration-testing and offensive-security agents.

## What breaks today
### Every attempt changes the target
An exploit that half-worked leaves the target in a state the next attempt did not expect, and results stop being comparable.

### Parallel attempts need parallel targets
Rebuilding the target for each attempt is slow, so attempts run one after another.

### An attacking agent must not reach the wrong hosts
An agent with open network access is a liability. It has to reach the target and nothing else.

## What changes with Promigence
### Fork the prepared target
Build the target once as a verified snapshot and fork a fresh copy per attempt. Each starts identical and isolated.

### Many attempts at once
Forks start warm, so dozens of attempts can run side by side from the same starting point.

### An outbound allow-list
An outbound allow-list, every refused host recorded, and a sandbox's egress can be cut at once.

## One prepared target, a fresh copy per attempt
```bash
promigence snapshot create --image debian:12 \
  --setup "apt-get update && apt-get install -y git" \
  --setup "git clone https://github.com/your-org/target-app /work/app && git -C /work/app checkout <40-char sha>" \
  --setup "cd /work/app && ./provision.sh" --verify "cd /work/app && ./healthcheck.sh" \
  --alias target-app --wait --wait-timeout 10m
promigence fork --snapshot target-app --count 20 --cap 5

# What a copy may reach, and every host it was refused
promigence sandbox network "$SANDBOX"
```