Skip to main content

Built by makers, shipped in public

Sign in

SuperPentest vs Toxic

A side-by-side comparison built from both listings. Blank cells mean the company has not given that detail; we never guess.

SuperPentest compared with Toxic
DetailSuperPentest logo SuperPentestToxic logo Toxic
What it doesAI penetration testing that proves every vulnerability with independent verification On-device moderation that flags hateful, abusive and threatening text in 23 European languages, before the message is sent.
StageNot given MVP
FoundedNot given Not given
Based inNot given NL
Pricing modelPaid Freemium
PricingOne-off Deep test: €3,500 one-time (includes fix retest). Standard: €990/month (4 scans per month). Deep: €2,900/month. Stress add-on: €900/month. Annual billing includes two months free. Free up to 100k monthly active devices with unlimited inference. Custom licenses available.
Key features
  • Identity replay matrix for testing authorization across multiple roles and tenants
  • Business logic invariant testing for coupon reuse and price tampering
  • Prompt injection and AI agent security testing including MCP servers
  • Independent verification with 3x reproduction requirement from clean sessions
  • 35 vulnerability classes tested deterministically
  • Scope and rules of engagement enforced in code before requests execute
  • Trust page for sharing security posture with customers and auditors
  • Mapping of findings to security compliance frameworks
  • Authorized stress testing with rate-limit discovery and circuit-breaker controls
  • Three separate scores: hateful, abusive, threat
  • Ten target signals under the hate score: race, color, religion, descent, national or ethnic origin, sexual orientation, gender, disability, age, other
  • Runs fully on device with no server calls
  • Supports 23 European languages from one model file
  • 80MB model size optimized for iOS, Android, and browser
  • 0.847 macro F1 accuracy on Multilingual HateCheck
  • Warn before message is sent
  • Comment triage without infrastructure
What makes it different
  • Reports only verified findings that are reproduced independently from clean sessions
  • Detects cross-tenant authorization flaws through identity replay that scanners miss
  • Identifies business logic flaws that signature-based scanners cannot catch
  • No-finding-no-fee guarantee on first deep test
  • Tests AI agents and prompt injection with canary verification
  • Multilingual support across 23 European languages in a single 80MB model
  • Complete privacy with no data leaving the device
  • Free access up to 100k monthly active devices with unlimited inference
Community votes00
DR (Domain Rating by Ahrefs)4 +4 (up) since last check37 no change since last check
Trust Flow (Majestic)220
Citation Flow (Majestic)139
Referring domains (Majestic)2616

5 details filled in for both companies.

More alternatives to SuperPentest More alternatives to Toxic

Ask us