BACKDOOR

They hack you for ransom.
We hack you for the report.

A swarm of AI agents attacks your site from the outside — exactly how real attackers would. No source code. No backend access. Just a real-world attack, followed by a report with proof, exploits, and fixes.

Black-box pentest•Top-20 worldwide•Hours, not weeks•Zero data retention•Custom payload mutation•No waitlists•Autonomous offensive AI
300 +
Attack scenarios
100 +
Сompanies tested
3 000 +
Vulnerabilities found
~ 5 hours
For a full pentest
127 +
AI agents running in parallel

Beat them to it.

Real attackers are already scanning your site. Let our agents go first.

Full report in 5 hours.

From € 399 · Black-box · Zero data retention · NDA available

Same hacker playbook. Different bill.

Manual pentest
BackDoor pentest
PRICE

from € 5,000

from € 399

TIME

4–6 weeks

5 hours

START

2–4 weeks after first call

right now

How it works.

Three steps. Same playbook a real attacker uses. Different ending.

Recon

We see what an attacker would see.
Forms, APIs, admin panels, subdomains.
~30 min

Attack

Every vulnerability, proven by exploit.
Steal data · bypass auth · reach payments · chain bugs
~4 hours

Report

Built for your CEO and your engineers.
Working PoC · CVSSv3 score · step-by-step fixes
~30 min

Hackers don't wait two weeks.

Neither do you. Full pentest in 5 hours. From 399.

Black-box · Zero data retention · NDA available

What you get

Not a PDF "about security." A list of vulnerabilities with proof, priorities, and fix instructions.

38%

Risk level: CRITICAL

6 vulnerabilities found. 3 give direct access to customer data. Fix immediately.

Vulnerabilities found

2 critical, 2 high

8

POC with exploit

not "possibly vulnerable" — proven

98.7%

Entry points tested

forms, APIs, admin panels, subdomains

384
CRITICAL

Customer database access via contact form

confirmed
CRITICAL

Remote code execution through file upload

confirmed
HIGH

Auth bypass — access to other users' orders

confirmed
HIGH

Admin panel exposed without 2FA

confirmed
MEDIUM

Rate limiting missing on login — brute force possible

confirmed

One scan. Every report you need.

Executive summary
One page: what we found, what's at stake, what to do. No jargon.
Audit-ready compliance
Mapped to SOC 2, ISO 27001, and NIST. Hand it straight to your auditor.
Engineering report
PoC exploits, reproduction steps, and prioritized fixes — ready for Jira.
PCI DSS
& GDPR
For payment processors,
e-commerce, and any business handling EU customer data.

Pay less when you scan more.

Same depth of testing on every plan. Just different volume.

Annual

One scan

€ 399 per scan

For when you need to test a site once.

  • Full black-box pentest of 1 site
  • Up to 25 subdomains, 100 pages/APIs
  • PDF report with PoC and fixes
  • 1 free re-scan after you fix
  • Report in ~5 hours

Pro

€ 333 per scan

16% off

€ 3 999 annually

Monthly coverage for growing teams.

  • 12 scans per year (1 per month)
  • Scan history & diff between runs
  • Email + Slack notifications
  • 1 free re-scan per cycle
  • Standard support

Scale

€ 270 per scan

32% off

€ 12 999 annually

Weekly coverage. Best per-scan price.

  • 48 scans per year (4 per month)
  • Jira, Slack, ServiceNow integration
  • Priority queue (start in ≤2h)
  • Dedicated account manager
  • Audit-ready reports (SOC 2, ISO, PCI DSS)
  • Quarterly business review
  • Advanced threat reports

Enterprise

For banks, fintech, and regulated industries. Custom plans available

  • 100+ scans per year
  • Custom SLA & dedicated infrastructure
  • Legal review & contract negotiation
  • Direct line to engineering team
  • White-label reports included
  • Priority response (≤1h)
  • On-premise deployment option

Frequently asked questions

Beat them to it.

Real attackers are already scanning your site. Let our agents go first. Full report in 5 hours.

From € 399 · Black-box · Zero data retention · NDA available