| What it does | Secure AI agents, with evidence
| Security scanner for AI-built websites
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | GR
| Not given
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Community: €0 (open source, 1x monthly testing volume, weekly monitoring, 3 seats, 30-day data retention). Team: €349/mo (20x monthly testing volume, 10 seats, 90-day data retention, webhooks, priority support). Enterprise: Custom pricing (contact for details).
| Basic: Free. Pro: $19 USD/month. Business: $39 USD/month.
|
|---|
| Key features | - Automated adversarial testing with multi-turn and agentic attack chains
- Black-box testing without SDK installation or agent modification
- Four-tier Humanbound Firewall with LLM judge
- Continuous posture score from 0 to 100
- Framework mapping to EU AI Act, NIST AI RMF, OWASP LLM Top 10, OWASP Agentic AI Top 10
- Air-gapped testing with self-hosted models like Ollama
- Export compliance evidence in HTML, PDF, JSON, SARIF, CEF formats
- Webhook integration with SIEM and ticketing systems
- Apache-2.0 open source CLI, testing engine, and SDK
- Baseline campaign completion in hours
| - Live URL security scan for vibe-coded apps
- Supabase Row Level Security checks
- Exposed API key and secret detection
- WCAG accessibility audit with axe-core
- SEO and AEO technical readiness checks
- Bundle size and unused code analysis
- Lab performance measurements (LCP, CLS, FCP, TTFB)
- GitHub source and Gitleaks secret detection
- AI fix prompts for Lovable, Bolt, Cursor, Claude
- Weekly and daily scheduled monitoring
|
|---|
| What makes it different | - Continuous monitoring instead of point-in-time reports
- Adaptive multi-turn attack chains that evolve over time
- Same open-source code as platform with nothing held back or limited
- No account required for local open-source testing
- Framework mapping and compliance evidence for regulatory requirements
| - Built specifically for AI-coded apps from Lovable, Bolt, v0, Cursor and Replit
- Evidence-based findings with severity, CWE/OWASP references and fix guidance
- Copy-paste AI fix prompts ready for your coding tool
- Real browser testing with Playwright and axe-core, not static analysis
- Scans public URLs without domain verification or credentials
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 13 ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 8 | 2 |
|---|
| Citation Flow (Majestic) | 30 | 14 |
|---|
| Referring domains (Majestic) | 71 | 1 |
|---|
Humanbound
VibeShield