| What it does | AI penetration testing that proves every vulnerability with independent verification
| Take your AI support bot from 4/10 to 10/10
|
|---|
| Stage | Not given
| MVP
|
|---|
| Founded | Not given
| 2026
|
|---|
| Based in | Not given
| Not given
|
|---|
| Pricing model | Paid
| Free trial
|
|---|
| Pricing | One-off Deep test: €3,500 one-time (includes fix retest). Standard: €990/month (4 scans per month). Deep: €2,900/month. Stress add-on: €900/month. Annual billing includes two months free.
| Free during beta. After beta: $29/month (your own AI keys, unlimited runs) or $59/month (AI included, 50 runs/month).
|
|---|
| Key features | - Identity replay matrix for testing authorization across multiple roles and tenants
- Business logic invariant testing for coupon reuse and price tampering
- Prompt injection and AI agent security testing including MCP servers
- Independent verification with 3x reproduction requirement from clean sessions
- 35 vulnerability classes tested deterministically
- Scope and rules of engagement enforced in code before requests execute
- Trust page for sharing security posture with customers and auditors
- Mapping of findings to security compliance frameworks
- Authorized stress testing with rate-limit discovery and circuit-breaker controls
| - Bot Score: rates bot performance across five dimensions (rules, facts, solutions, tone, trick resistance)
- Break my bot: 15 adversarial customer scenarios test for vulnerabilities
- Fix it for me: automatically rewrites rule sheet and tests against saved situations
- Train my bot: 30-minute automated training on weak spots with test validation
- GitHub integration: sends improvements as pull requests for engineer approval
- Real chat analysis: identifies problems in actual customer conversations with privacy masking
- Knowledge check: validates bot replies against FAQ and policy documents
- AI comparison: test bot performance across Claude, ChatGPT, and Gemini with costs and speed
- Open source engine: public GitHub implementation of scoring and testing algorithms
|
|---|
| What makes it different | - Reports only verified findings that are reproduced independently from clean sessions
- Detects cross-tenant authorization flaws through identity replay that scanners miss
- Identifies business logic flaws that signature-based scanners cannot catch
- No-finding-no-fee guarantee on first deep test
- Tests AI agents and prompt injection with canary verification
| - Nothing ships without engineer approval: all changes go through GitHub pull request review
- Privacy by default: customer data anonymized, keys encrypted, uploads not stored
- Open source testing engine: full algorithm transparency available on GitHub
- Works with your existing AI: supports Claude, ChatGPT, and Gemini with user's own keys
- Unified team experience: one plan covers support, product, and engineering roles
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 4 ▲ +4 (up) since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 2 | 0 |
|---|
| Citation Flow (Majestic) | 1 | 0 |
|---|
| Referring domains (Majestic) | 2 | 0 |
|---|
SuperPentest
Rulebook