| What it does | Secure AI agents, with evidence
| AI penetration testing that proves every vulnerability with independent verification
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | GR
| Not given
|
|---|
| Pricing model | Freemium
| Paid
|
|---|
| Pricing | Community: €0 (open source, 1x monthly testing volume, weekly monitoring, 3 seats, 30-day data retention). Team: €349/mo (20x monthly testing volume, 10 seats, 90-day data retention, webhooks, priority support). Enterprise: Custom pricing (contact for details).
| One-off Deep test: €3,500 one-time (includes fix retest). Standard: €990/month (4 scans per month). Deep: €2,900/month. Stress add-on: €900/month. Annual billing includes two months free.
|
|---|
| Key features | - Automated adversarial testing with multi-turn and agentic attack chains
- Black-box testing without SDK installation or agent modification
- Four-tier Humanbound Firewall with LLM judge
- Continuous posture score from 0 to 100
- Framework mapping to EU AI Act, NIST AI RMF, OWASP LLM Top 10, OWASP Agentic AI Top 10
- Air-gapped testing with self-hosted models like Ollama
- Export compliance evidence in HTML, PDF, JSON, SARIF, CEF formats
- Webhook integration with SIEM and ticketing systems
- Apache-2.0 open source CLI, testing engine, and SDK
- Baseline campaign completion in hours
| - Identity replay matrix for testing authorization across multiple roles and tenants
- Business logic invariant testing for coupon reuse and price tampering
- Prompt injection and AI agent security testing including MCP servers
- Independent verification with 3x reproduction requirement from clean sessions
- 35 vulnerability classes tested deterministically
- Scope and rules of engagement enforced in code before requests execute
- Trust page for sharing security posture with customers and auditors
- Mapping of findings to security compliance frameworks
- Authorized stress testing with rate-limit discovery and circuit-breaker controls
|
|---|
| What makes it different | - Continuous monitoring instead of point-in-time reports
- Adaptive multi-turn attack chains that evolve over time
- Same open-source code as platform with nothing held back or limited
- No account required for local open-source testing
- Framework mapping and compliance evidence for regulatory requirements
| - Reports only verified findings that are reproduced independently from clean sessions
- Detects cross-tenant authorization flaws through identity replay that scanners miss
- Identifies business logic flaws that signature-based scanners cannot catch
- No-finding-no-fee guarantee on first deep test
- Tests AI agents and prompt injection with canary verification
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 13 ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 8 | 2 |
|---|
| Citation Flow (Majestic) | 30 | 1 |
|---|
| Referring domains (Majestic) | 71 | 2 |
|---|
Humanbound
SuperPentest