COO
Luke Potter
About Luke
Luke Potter joined CovertSwarm as COO in January 2022, bringing with him an extensive background in offensive security and penetration testing. He has spent his career building and scaling cyber delivery functions, and CovertSwarm gave him both the problem worth solving and the team capable of solving it properly.
As COO, Luke owns product, delivery, and operations. His focus is on ensuring that CovertSwarm’s Constant Cyber Attack™ model does exactly what it promises: relentless, meaningful pressure on clients’ defenses, cycle after cycle, with none of the spin-up time or reporting dead zones that make traditional testing so limited.
In April 2026, Luke announced the launch of RAID, CovertSwarm’s Red Team AI Division: a framework integrating agentic AI into offensive operations to extend the speed and scale of what the Hive’s ethical hackers can deliver. His argument was direct. Real adversaries are already using AI. Waiting was not an option.
Luke is also one of the regular hosts of CovertSwarm’s podcast, You Deserve to be Hacked, where he interviews operators, researchers, and industry leaders on the realities of offensive security.
Latest posts
Why a vulnerability research agent has to look beyond one file
A weakness that looks convincing in one file can vanish once you see the whole application. Luke Potter explains how the Swarm keeps an AI lead separate from a proven finding, and why the practitioner always makes the final call.
You can’t keep up, so prioritize better.
Attackers don't need to find every route in. They just need one. COO Luke Potter argues the fix isn't more scanning. It's vulnerability prioritization: focus research where an attacker would actually look, then build the signal to catch what slips through.
The OpenAI agents didn’t go rogue. They went out of scope, together.
OpenAI, Anthropic, Meta and the UK AI Security Institute have each now disclosed agents reaching systems they were never authorised to touch. Luke Potter revisits his original AI agent security analysis with the fuller evidence, and what it demands of containment design.
You can’t secure what you can’t see.
OpenAI's own agent breached Hugging Face's infrastructure without ever going rogue. It just stayed on-task and found the gaps in its containment. That's the clearest argument yet for real AI agent governance: deterministic scope enforcement, not a system prompt promising good behavior.
ByDom Pietrzak and Luke Potter
Don’t become the demo: a guide to surviving summer hacker camp
Hacker Summer Camp brings 30,000+ security minds to Las Vegas, and with them, plenty of ways to become an unintended demo. CovertSwarm's COO shares his field-tested rules for public Wi-Fi, DNS manipulation, rogue Bluetooth prompts, and IMSI catchers, learned across seven or eight DEF CONs.
The OpenAI agent didn’t “go rogue”. The containment failed.
I’ve purposely held back from commenting on the OpenAI and Hugging Face incident. The early coverage was predictably dramatic. AI went rogue. OpenAI attacked Hugging Face. Autonomous hackers escaped. Skynet found curl. Great headlines. Lots of marketing hype. Not enough established…
Your attacker knows when your last pen test was
Annual penetration testing doesn't just fail to keep pace with your attack surface. It operates on a calendar your adversaries can read. CovertSwarm COO Luke Potter on the reconnaissance signals that make your testing rhythm visible, and the logic that keeps security leaders locked into a model they know is broken.
Frontier AI models are exciting.
CovertSwarm COO Luke Potter on why frontier AI is genuinely exciting, why most of the conversation is asking the wrong questions, and what it means for how we attack.
Constant Cyber Attack: What People Keep Getting Wrong
There are a lot of terms floating around offensive security right now. COST. CTEM. Exposure validation. Some of it is useful. Most of it is new wrapping paper on old delivery. This is what continuous offensive security testing actually needs to look like.
CovertSwarm launches RAID: Our red team AI division
CovertSwarm COO Luke Potter announces RAID, our Red Team AI Division, and why real adversaries made it non-negotiable.
SOC Testing: Turning Your Security Operations Centre into a Continuous Learning Engine
SOC testing isn’t just about finding vulnerabilities. It’s about building collaboration, sharpening human judgment, and turning your SOC into a continuous learning engine.
What Is Constant Cyber Attack?
CovertSwarm COO Luke Potter explains why traditional testing no longer reflects how real attackers operate. In this piece, he defines Constant Cyber Attack, a discipline built on continuous, real-world emulation that helps organisations outpace genuine threats.