| What it does | AI penetration testing that proves every vulnerability with independent verification
| AI security reviewer for engineering teams
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| GB
|
|---|
| Pricing model | Paid
| Freemium
|
|---|
| Pricing | One-off Deep test: €3,500 one-time (includes fix retest). Standard: €990/month (4 scans per month). Deep: €2,900/month. Stress add-on: €900/month. Annual billing includes two months free.
| Free for up to 2 active contributors or open source projects. Starter $95/month for up to 5 contributors, Team $195/month for up to 15 contributors, Growth $395/month for up to 40 contributors. Annual subscriptions billed upfront at ten times the monthly price (2 months free).
|
|---|
| Key features | - Identity replay matrix for testing authorization across multiple roles and tenants
- Business logic invariant testing for coupon reuse and price tampering
- Prompt injection and AI agent security testing including MCP servers
- Independent verification with 3x reproduction requirement from clean sessions
- 35 vulnerability classes tested deterministically
- Scope and rules of engagement enforced in code before requests execute
- Trust page for sharing security posture with customers and auditors
- Mapping of findings to security compliance frameworks
- Authorized stress testing with rate-limit discovery and circuit-breaker controls
| - Codebase context mapping across repositories and components
- Architecture review and security assumptions analysis
- Focused vulnerability hunting with specialised security lenses
- Finding validation and deduplication
- HTML reports with source locations and suggested fixes
- Review state dashboard with findings filtered by severity
- CLI and terminal dashboard interface
- Support for Claude, Codex and OpenCode AI models
- Unlimited repositories and Dokima runs per plan
- Local data processing without uploading findings
|
|---|
| What makes it different | - Reports only verified findings that are reproduced independently from clean sessions
- Detects cross-tenant authorization flaws through identity replay that scanners miss
- Identifies business logic flaws that signature-based scanners cannot catch
- No-finding-no-fee guarantee on first deep test
- Tests AI agents and prompt injection with canary verification
| - AI-powered security review that learns how your software works and keeps reviewing as code evolves
- Findings challenged before presentation to separate plausible issues from weak ones
- Choose your own AI models to suit your budget and privacy preferences
- Full product trial for 21 days with no payment card required
- Free forever for small teams up to 2 contributors and open source projects
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | Not checked yet ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 2 | 0 |
|---|
| Citation Flow (Majestic) | 1 | 0 |
|---|
| Referring domains (Majestic) | 2 | 1 |
|---|
SuperPentest