AI-Powered Pentesting for DevSecOps: 7 Checks Developers Should Make First