Question 1

What is Pigeon?

Accepted Answer

Pigeon manages application security for fast-moving software teams. It starts with autonomous pentesting, then expands into always-on security agents that find, validate, prioritize, and help fix risk across code, runtime, cloud, and integrations.

Question 2

What does Pigeon test?

Accepted Answer

Pigeon tests source code, exposed runtime surfaces, target authentication, API behavior, tool use, prompt injection paths, data exposure, and multi-step business logic abuse.

Question 3

Can Pigeon test private repositories?

Accepted Answer

Yes. Pigeon supports GitHub App based repository import so teams can grant scoped access to selected repositories without sharing broad personal access tokens.

Question 4

How is Pigeon different from traditional application security testing?

Accepted Answer

Traditional tools are good at known patterns and point-in-time checks. Pigeon uses the pentest as the wedge into a broader operating model where security agents keep validating behavior, evidence, and remediation over time.