Recurring runs, several products, a custom scope or an NDA. Tell us about your stack and we'll come back with a plan built around it.
Pricing is scoped per engagement — no card, nothing to pay here. Send the request and we'll reply with a plan and a quote.
You confirm you own the target, or hold written authorisation to have it tested. A scope you do not control is never accepted, and the scope gate is a deterministic rule — not a judgement call.
The agent reads and probes. Writes, deletions and anything persistent require an explicit flag and a second confirmation from you.
Proof is demonstrated with the smallest safe effect — a harmless echo, a canary, a boolean delta. No destructive commands, no binaries fetched, no persistence left behind.
Raw secrets stay out of the report and the logs — only the fact of exposure is recorded.
Rate limiting at ≤10 requests per second, timeouts, a circuit breaker on 5xx storms and an SSRF guard on internal addresses. You can stop a run at any moment.
One run produces one report: what was tested, what was proven, the recommended fix and the re-test result. Remediation is advised — your team applies it; the agent never writes to your code.
We'll come back with a scope, a plan and a quote. Nothing is tested before you approve the scope in writing.