The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System

2026-07-15 · Source: wiz.io - Www.wiz.io · Field: Technology & Digital — Cybersecurity & Data Privacy, Artificial Intelligence & Machine Learning, Software Development & Engineering · Depth: Intermediate, medium

Summary

The Wiz Red Agent, an autonomous AI pentesting tool, uncovered a critical business-logic flaw in a leading B2B platform's data API, allowing free-tier users to bypass paywalls and access sensitive contact data. This flaw enabled the retrieval of unmasked business email addresses for over 600M contacts, direct phone numbers for 135M+ verified records, and personal email addresses for approximately 50% of records, along with company intelligence. The Red Agent, operating from a free-tier account, mapped the application's API surface by analyzing over 130MB of frontend code bundles to identify more than 100 endpoints. It then reverse-engineered request/response schemas, hypothesizing that a client-controlled "unmaskContactData" boolean flag, though omitted by the standard UI, would be accepted by the backend without entitlement verification. By injecting this flag into a standard search request, the agent successfully retrieved fully unmasked data. The platform's security team remediated the vulnerability within two hours of the report.

Key takeaway

For Security Engineers evaluating application defenses, recognize that business-logic flaws are a critical blind spot for traditional SAST/DAST tools. You must enforce all entitlement, pricing, and access decisions server-side, never trusting client-controlled input. Implement continuous, AI-driven offensive security testing to uncover these subtle vulnerabilities at machine speed. This proactive approach mirrors AI-powered adversaries, protecting your systems.

Key insights

A single client-controlled boolean flag bypassed a B2B platform's entire paywall, exposing 600M+ contact profiles.

Principles

• Business-logic flaws exploit gaps between intended and enforced application rules.
• Never trust client-side input for server-side authorization or entitlement checks.
• Traditional security tools often miss business-logic flaws due to valid requests.

Method

The Red Agent performed reconnaissance via client-side JavaScript analysis, generated hypotheses by reverse-engineering API schemas, established a baseline, and exploited the flaw by injecting a client-controlled boolean flag into a standard API request.

In practice

• Analyze frontend code bundles to discover internal API endpoints and parameters.
• Test backend APIs for client-controlled flags that bypass authorization.
• Implement server-side entitlement checks for all data access decisions.

Topics

• Business Logic Flaws
• API Security
• Authorization Bypass
• AI Pentesting
• Red Agent
• Client-Side Trust

Best for: CTO, VP of Engineering/Data, Director of AI/ML, AI Security Engineer, Security Engineer, AI Architect

Related on AIssential

• The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API — Autonomous AI agents can exploit basic authorization flaws in GraphQL APIs within minutes.
• The Red Agent POV: How it Reasoned its Way to SSRF — AI-driven Red Agent found a complex SSRF-to-LFR exploit by reasoning through application-specific behaviors and validator-fetcher parsing differentials.
• AI Pentesting Finds More Bugs in OSS Projects — AI pentesting excels at discovering complex, context-dependent vulnerabilities missed by traditional signature-based DAST tools.
• AI tool poisoning exposes a major flaw in enterprise agent security — AI agent tool registries require behavioral integrity checks, not just artifact integrity, to counter sophisticated supply chain attacks.
• Sifting the Noise: A Comparative Study of LLM Agents in Vulnerability False Positive Filtering — LLM agents significantly reduce SAST false positives, but effectiveness is highly dependent on the backbone model and vulnerability category.
• Autoresearch Claude Code Hacker - Can It Breach My Vibecoded Site? — An AI-driven red teaming framework can autonomously test web application security and iteratively refine attack strategies.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by wiz.io - Www.wiz.io.