Name: Pigeon - Frictionless Application Security for AI Software Teams
Author: Pigeon

Question 1

What is Pigeon?

Accepted Answer

Pigeon manages application security for fast-moving software teams. It starts with autonomous pentesting, then expands into always-on security agents that find, validate, prioritize, and help fix risk across code, runtime, cloud, and integrations.

Question 2

What does Pigeon test?

Accepted Answer

Pigeon tests source code, exposed runtime surfaces, target authentication, API behavior, tool use, prompt injection paths, data exposure, and multi-step business logic abuse.

Question 3

Can Pigeon test private repositories?

Accepted Answer

Yes. Pigeon supports GitHub App based repository import so teams can grant scoped access to selected repositories without sharing broad personal access tokens.

Question 4

How is Pigeon different from traditional application security testing?

Accepted Answer

Traditional tools are good at known patterns and point-in-time checks. Pigeon uses the pentest as the wedge into a broader operating model where security agents keep validating behavior, evidence, and remediation over time.

Pigeon, plainly.

What is Pigeon?

What does Pigeon test?

Is Pigeon a scanner or a pentest?

Do you need source code?

Can Pigeon test private repositories?

How is this different from traditional application security testing?