| What it does | Independent AI verification and production control layer
| AI penetration testing that proves every vulnerability with independent verification
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| Not given
|
|---|
| Pricing model | Freemium
| Paid
|
|---|
| Pricing | Starter: $166/month ($1,990 billed annually) with 12,000 test runs/month, 3 applications, and validated fixes at $25 each. Team: $833/month ($9,990 billed annually) with 55,000 test runs/month and 10 applications. Business: $2,083/month ($25,000 billed annually) with 165,000 test runs/month, 25 appl
| One-off Deep test: €3,500 one-time (includes fix retest). Standard: €990/month (4 scans per month). Deep: €2,900/month. Stress add-on: €900/month. Annual billing includes two months free.
|
|---|
| Key features | - System Graph mapping of services, dependencies, ownership, and policies
- Verification Engine with 19 verification domains from unit tests to compliance
- Continuous verification and change detection
- Policy-based control and approval workflows
- Durable evidence and audit trails
- AI-assisted remediation with outcome-based billing
- Integration with CI/CD, cloud, and observability tools
- VPC, private cloud, on-prem, and air-gapped deployment
- Identity-first with RBAC and SSO
- Secure Enclave Runner for restricted environments
| - Identity replay matrix for testing authorization across multiple roles and tenants
- Business logic invariant testing for coupon reuse and price tampering
- Prompt injection and AI agent security testing including MCP servers
- Independent verification with 3x reproduction requirement from clean sessions
- 35 vulnerability classes tested deterministically
- Scope and rules of engagement enforced in code before requests execute
- Trust page for sharing security posture with customers and auditors
- Mapping of findings to security compliance frameworks
- Authorized stress testing with rate-limit discovery and circuit-breaker controls
|
|---|
| What makes it different | - Independent verification separates proposing changes from deciding if available evidence is sufficient
- Model-independent design works with any approved model or deterministic systems alone
- Outcome-based billing charges only for validated fixes that pass verification
- Governance by default with explicit approval, audit, and no shared credentials
- Topology-aware impact analysis using System Graph to recommend validation plans
| - Reports only verified findings that are reproduced independently from clean sessions
- Detects cross-tenant authorization flaws through identity replay that scanners miss
- Identifies business logic flaws that signature-based scanners cannot catch
- No-finding-no-fee guarantee on first deep test
- Tests AI agents and prompt injection with canary verification
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 28 ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 5 | 2 |
|---|
| Citation Flow (Majestic) | 20 | 1 |
|---|
| Referring domains (Majestic) | 62 | 2 |
|---|
Zof
SuperPentest