Number 1: 
Ora
Make your site work for agents
- AI testing & review
- United States
- DR 60 +1 (up) since last check
AI testing & review
SuperPentest
AI penetration testing that proves every vulnerability with independent verification
- Community votes
- 0
- DR by Ahrefs
- 0 no change since last check
Ahrefs Domain Rating benchmarked 31 Oct 2026, rebuilt 31 Oct 2026.
An autonomous AI penetration testing platform for web applications, APIs and AI agents that verifies findings through independent reproduction before reporting.
What it is
SuperPentest is an autonomous AI penetration testing platform designed for web applications, APIs and AI agents. It conducts security testing within an approved scope and reports only vulnerabilities that have been independently verified through multiple reproductions from clean sessions. The platform enforces scope and rules of engagement through code, supports identity replay testing for authorization flaws, tests business logic invariants, and includes AI agent security testing with prompt injection detection. Results are delivered as detailed case files with replayable evidence including request-response pairs and hash-chained audit trails, mapped to security compliance frameworks. The platform offers both one-off deep assessments and recurring scans, with a no-finding-no-fee guarantee on initial deep tests.
What it is built with
- Identity replay matrix for testing authorization across multiple roles and tenants
- Business logic invariant testing for coupon reuse and price tampering
- Prompt injection and AI agent security testing including MCP servers
- Independent verification with 3x reproduction requirement from clean sessions
- 35 vulnerability classes tested deterministically
- Scope and rules of engagement enforced in code before requests execute
- Trust page for sharing security posture with customers and auditors
- Mapping of findings to security compliance frameworks
- Authorized stress testing with rate-limit discovery and circuit-breaker controls
Pricing
Pricing model: Paid
One-off Deep test: €3,500 one-time (includes fix retest). Standard: €990/month (4 scans per month). Deep: €2,900/month. Stress add-on: €900/month. Annual billing includes two months free.
SuperPentest metrics
| Metric | Value |
|---|---|
| Domain Rating | 0 no change since last check |
| Trust Flow | 2 no change since last check |
| Citation Flow | 1 no change since last check |
| Referring domains | 2 no change since last check |
| External backlinks | 3 no change since last check |
Ahrefs Domain Rating benchmarked 31 Oct 2026, rebuilt 31 Oct 2026. Main build topic: Regional/Asia (2). Majestic benchmarked 31 Oct 2026, rebuilt 31 Oct 2026. Link data built by Majestic. Trust Flow, Citation Flow and Topical Trust Flow are trademarks of Majestic-12 Ltd.
SuperPentest domain build sheet
Open the build sheet
| Domain age | 1 month |
|---|---|
| Registered | |
| Expires | |
| Registrar | Squarespace Domains LLC |
| DNSSEC | Not signed |
SuperPentest after-launch build log
Since SuperPentest launched on Maker Launches on 31 October 2026, these are the figures we have tracked.
- Domain Rating (Ahrefs)
- 0
- First measured 31 Oct 2026
- Referring domains (Majestic)
- 2
- First measured 31 Oct 2026
Day 0 since launch. Next receipt: day 30, 30 Nov 2026. We show what changed, not what caused it: many things affect these numbers. Nothing here is estimated.
Compare and explore
Questions from the bench
- Is it safe to run against production?
- Runs operate inside signed rules of engagement with verified ownership, scope enforced at network egress by code, rate-limited requests with backoff, stop conditions, and redacted secrets in evidence. SuperPentest is not a load generator; resilience testing is a separate authorized add-on.
- What does verified actually mean?
- A candidate becomes a finding only after independent reproduction in a clean session, with a control request showing the expected boundary next to the test request showing the failure. Unreliable responses like 401, 429, 5xx or WAF blocks are recorded as inconclusive, never promoted.
- Does this replace a manual pentest?
- For web applications, APIs and their AI components, a one-off Deep test is positioned to meet yearly pentest requirements with published coverage maps and known gaps. Use verified evidence to focus deep manual work on bespoke components instead of paying for breadth twice.
- How is this different from a scanner?
- A scanner flags suspicious patterns. SuperPentest investigates the application in context, examining which identity acted, what business rule applied, what state changed, and what evidence supports the conclusion. Each result includes a replayable trace and anything that cannot be reproduced is dropped.
- What do we have to provide?
- Your application, an approved scope, and test identities — for example a viewer in two different tenants. Point it at staging if you have one, production if you do not. Exact scope is confirmed in writing before anything runs.
Leave a review for SuperPentest
Nobody has put SuperPentest on the bench yet. Leave the first review.
Reviewing is free, and nobody can pay for a review. Read the bench notes
Maker reviews · Workshop notes · Show it off · Did you make this? Claim it · Report this build
SuperPentest has a free listing. The owner can unlock the full profile with a paid launch for $5:
- Founder story (locked)
- Milestones (locked)
- Demo video (locked)
- Dofollow website link (locked)
More builds like this
Number 1:
Number 2:
Ocular AIEncoding Human Expertise into Machines
- AI testing & review
- United States
- DR 27 −1 (down) since last check
Number 3:
KlarentAI-powered autonomous QA platform for web, iOS and Android testing
- AI testing & review
- Switzerland
- DR 26 no change since last check
Number 4:
DockOne-click molecular docking with AutoDock Vina in your browser
- AI testing & review
- DR 3 +1 (up) since last check