| What it does | AI penetration testing that proves every vulnerability with independent verification
| Citations, built for AI agents
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| Not given
|
|---|
| Pricing model | Paid
| Freemium
|
|---|
| Pricing | One-off Deep test: €3,500 one-time (includes fix retest). Standard: €990/month (4 scans per month). Deep: €2,900/month. Stress add-on: €900/month. Annual billing includes two months free.
| Free tier for small requests with no API key required; 10 million free tokens to start; $1 per million tokens for pay-as-you-go, with discounts available at volume or with annual commitments; failed requests are never charged.
|
|---|
| Key features | - Identity replay matrix for testing authorization across multiple roles and tenants
- Business logic invariant testing for coupon reuse and price tampering
- Prompt injection and AI agent security testing including MCP servers
- Independent verification with 3x reproduction requirement from clean sessions
- 35 vulnerability classes tested deterministically
- Scope and rules of engagement enforced in code before requests execute
- Trust page for sharing security posture with customers and auditors
- Mapping of findings to security compliance frameworks
- Authorized stress testing with rate-limit discovery and circuit-breaker controls
| - Token-level attribution with confidence scores
- Works with any AI model without access to weights or internals
- Processes documents up to 1 million tokens
- Returns results in under 2 seconds for 20,000-token documents
- On-premise and air-gapped deployment options
- PDF support with character-level mapping
- Supports 23+ languages including Indian languages
- Chrome browser extension for page and PDF tracing
- Raw token-by-token heatmaps available via API
- No data logging or training on request content
|
|---|
| What makes it different | - Reports only verified findings that are reproduced independently from clean sessions
- Detects cross-tenant authorization flaws through identity replay that scanners miss
- Identifies business logic flaws that signature-based scanners cannot catch
- No-finding-no-fee guarantee on first deep test
- Tests AI agents and prompt injection with canary verification
| - Measures attention directly from the model's computation rather than asking the model to cite itself, providing verifiable attribution
- Achieves frontier-grade citation quality at 7x lower cost and 5-6x faster than alternatives
- Never confused by duplicate facts—identifies the exact occurrence the answer used even when values appear multiple times
- Lands on exact tokens down to character level, not just document chunks
- Works on any model's output post-generation without modifying inference pipeline
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | Not checked yet ● no change since last check | 2 ● no change since last check |
|---|
| Trust Flow (Majestic) | 2 | 3 |
|---|
| Citation Flow (Majestic) | 1 | 16 |
|---|
| Referring domains (Majestic) | 2 | 36 |
|---|
SuperPentest
TokenPath