From 70ca71801c25160bbf78b9e62499cbff902c9a5a Mon Sep 17 00:00:00 2001 From: Cody Maffucci <46459665+Maffooch@users.noreply.github.com> Date: Mon, 21 Sep 2026 21:30:06 -0600 Subject: [PATCH] docs(sensei): AI Agent Red Teaming is GA, drop the feature-flag gating The agent_redteam feature flag was removed; AI Agent Red Teaming is now available on any instance whose license includes Sensei. Update the requirements, the intro note, and the troubleshooting entry to stop telling readers to enable a feature flag. --- docs/content/sensei/ai_agent_redteam.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/content/sensei/ai_agent_redteam.md b/docs/content/sensei/ai_agent_redteam.md index 57cd4540ab8..f16ed6e2245 100644 --- a/docs/content/sensei/ai_agent_redteam.md +++ b/docs/content/sensei/ai_agent_redteam.md @@ -5,7 +5,7 @@ draft: false audience: pro weight: 5 --- -Note: Sensei is a DefectDojo Pro-only feature. AI Agent Red Teaming is currently in BETA and is gated behind the `agent_redteam` feature flag. +Note: Sensei is a DefectDojo Pro-only feature. AI Agent Red Teaming is available on any instance whose license includes Sensei. Sensei's capabilities share one hub. **AppSec** scans and fixes source-code repositories, **Cloud Security Posture (CSPM)** does the same for cloud accounts, and **AI Agent Red Teaming** does it for a **deployed AI agent**: point Sensei at your agent's endpoint, and it runs an autonomous attacker that talks to the agent through its normal interface, tries to make it misbehave, and imports each confirmed break as a DefectDojo finding. @@ -22,7 +22,7 @@ Separately, a **runtime-check API** lets your own agent ask DefectDojo to vet a ## Requirements -- A **DefectDojo Pro** license that includes the **Sensei** feature, with an **agent-target quota** (`sensei_agent_target_limit`). While in beta, the capability is also gated behind the **`agent_redteam`** feature flag (**Settings > Feature Flags**). +- A **DefectDojo Pro** license that includes the **Sensei** feature, with an **agent-target quota** (`sensei_agent_target_limit`). No feature flag is required. - An **AI provider configured** for the instance (the same AI Model Settings the rest of Sensei uses); the attacker is itself LLM-driven. - A **reachable agent endpoint**. The attacker makes outbound HTTP calls to it, so the endpoint must be reachable from the Sensei engine. - To **onboard** targets and **run scans**: a global **Maintainer** or **Owner** role. @@ -123,7 +123,7 @@ AI Agent Red Teaming meters against the **agent-target quota** (`sensei_agent_ta ## Troubleshooting -- **The AI Agents tab is not shown.** The capability is in beta and gated behind the `agent_redteam` feature flag. Enable it on **Settings > Feature Flags**. +- **The AI Agents tab is not shown.** The capability requires a DefectDojo Pro license that includes the **Sensei** feature. If the tab is missing, confirm your license covers Sensei. - **"No agent-target quota is available."** Your license carries no `sensei_agent_target_limit`, or it is used up. Contact your DefectDojo administrator to raise it. - **A scan fails to reach the target.** The Sensei engine makes outbound HTTP calls to the target's base URL; confirm the endpoint is reachable from the engine and that the credential and auth header are correct. - **A scan errors on the LLM.** The attacker is LLM-driven, so a scan needs a working AI provider. Configure one under **AI Model Settings**.