Where Does Automated Pentesting Fit in CTEM?

**Executive summary:** This document explains Continuous Threat Exposure Management (CTEM) and Adversarial Exposure Validation (AEV), outlines how automated pentesting, breach-and-attack simulation, and control-aware inference combine to validate exposure across an environment, highlights the limits of live exploitation (covering ~10–15% of assets), and positions Picus as a platform that integrates all three validation techniques into a continuous validation-and-remediation loop.