Automated pen testing is already a thing. The same technology that improves it can also be used to harden systems against attack.