# SuperPentest

> Autonomous, authorized AI penetration testing. Give it your application, the scope
> you approve and test identities; an AI team maps your attack surface, tests real
> authorization boundaries, and returns replayable, control-verified evidence your
> engineers can fix — not another queue of scanner alerts.

A scanner matches patterns and raises alerts. SuperPentest works in steps —
understand, hypothesize, test, compare, reproduce, evidence — inside an explicit,
authorized scope. Only supported findings are promoted; unstable signals are held back.

## Definition
SuperPentest is an autonomous AI penetration tester for web applications, APIs and AI
agents. It maps the authorized attack surface, drives a browser as each identity you
supply, orchestrates mature open-source scanners, and independently reproduces every
candidate in a clean session before it is called a finding. Evidence is hash-chained and
mapped to PCI-DSS, SOC 2, ISO 27001, NIS2, DORA and OWASP controls.

## By the numbers
- 35 vulnerability classes the engine knows how to test, from SQL injection to prompt injection.
- 40+ specialist tools orchestrating 13 industry-standard open-source scanners.
- 4 steps behind every result: business rule, controlled test, clean-session proof, impact.
- 3 testing depths: Standard, Deep and Stress, each inside your written authorization.
- 100% of requests inside the authorized scope; 0 secrets exposed.
- Pilots complete, now open for customers: 10+ authorized pilot engagements run, finding real vulnerabilities. Customer testimonials are published, attributed by role and sector at customers' request (named references available under NDA); no public customer logos or named case studies yet.

## The autonomous team
- Recon — maps the authorized surface: routes, objects, test identities.
- Planner — turns the map into an ordered test plan.
- Hypothesis — proposes specific, testable attack paths.
- Specialists — run focused tests per risk class (ownership, access control, injection).
- Verifier — reproduces each candidate finding before it counts.
- Impact — explains what a confirmed finding means for the business.
- Critic — challenges thin evidence and holds back the unproven.

## Investigation model
- Surface — what changed?
- Context — who can reach it?
- Behavior — what actually breaks? (control 403 vs. test 200, replayed)
- Evidence — what should change? (request, response, control, replays, fix direction)

## Run intelligence
After every run, operators can see what was understood, tested, skipped and proved:
workflows covered, roles exercised, endpoints explored, hypotheses tested, findings
proved, blocked areas, tool executions, token usage and unresolved gaps. Private model
reasoning is not exposed.

## AI & agent security
A core strength: SuperPentest tests the AI in your product like an attacker will.
- Direct & indirect prompt injection — a unique canary planted in data the agent later reads proves it acted on untrusted content (a confirmed second-order injection, not a guess).
- Tool-call & permission boundaries — whether the agent can be steered into a dangerous tool call or beyond its authority is tested, never assumed.
- MCP (Model Context Protocol) — the servers and tools your agent connects to are their own attack surface, tested directly.
- Structured AI red-team — jailbreak, boundary and exfiltration attempts, each reproduced with its canary signal.

## Compliance mapping & trust page
- Each verified finding maps to the control it breaks across PCI-DSS, SOC 2, ISO 27001, NIS2, DORA and OWASP — evidence, not a blank questionnaire.
- Trust page — a shareable page for customers and auditors showing when you were last tested, that findings were independently verified and that fixes were retested. It stays current on its own.

## Continuous testing
Assess, fix, retest, compare, schedule, repeat. Re-run the same investigation after a
change to confirm a fix is closed and catch a regression.

## Controls
- Rules of Engagement — authorized assets, identities, actions and an expiry agreed up front.
- Ownership verification — targets confirmed as yours before any test request.
- Scope enforcement — excluded hosts and network boundaries blocked at egress.
- Request limits — rate-limited; backs off when a target shows stress.
- Stop conditions — the run halts on your conditions and shuts down cleanly on request.
- Secret handling — captured traffic redacted before it is stored or shown.
- Audit trail — every promoted finding carries the control, test and replays that prove it.

## Use cases
- E-commerce — order ownership: can one signed-in customer retrieve another customer's order?
- Finance — document authorization: does a valid session reveal a statement owned by another account?
- SaaS — role enforcement: can a viewer perform an action reserved for workspace admins?

## Pricing
Prices in EUR, one application or API in scope; every result is independently verified.
- One-off Deep test — EUR 3,500 one-time, with a fix retest included (entry option; meets a yearly pentest requirement).
- Standard — EUR 990 / month, 4 scans per month (broad coverage, scheduling and alerts).
- Deep — EUR 2,900 / month, 4 scans per month (business-logic, identity replay, AI-agent & MCP testing, trust page).
- Stress — +EUR 900 / month add-on (authorized, bounded resilience testing).
- Annual billing: pay yearly and get 2 months free. Exact scope quoted in writing.
- Structured, agent-readable pricing: https://superpentest.com/pricing.txt

## Contact
- [Book a demo / scope a pilot](https://cal.com/enes-cetinkaya/superpentest): 30 minutes with the founder.
- [Email](mailto:hello@superpentest.com): hello@superpentest.com

## Business-aware investigation
SuperPentest learns the authorized application's workflows, roles, data ownership
and tenant boundaries. Those business rules inform specific attack hypotheses.
Each finding traces four steps: the business rule, a controlled test, proof by
clean-session reproduction, and the impact. The landing page includes interactive illustrative examples;
it does not execute pentests or make live test requests.

## Full content bundle
- [llms-full.txt](https://superpentest.com/llms-full.txt): complete, citable description with every section expanded.
- [pricing.txt](https://superpentest.com/pricing.txt): structured pricing for AI agents comparing tools (plans, limits, terms).
- [OKF bundle](https://superpentest.com/okf/index.md): Open Knowledge Format — the content as cross-linked, agent-readable concept files.

## Research
- [Research index](https://superpentest.com/research): methods, teardowns and notes from the engine.
- [AI agent penetration testing](https://superpentest.com/ai-agent-penetration-testing): the pillar — prompt injection, MCP, tool-call and permission boundaries.
- [Proving a second-order prompt injection with a planted canary](https://superpentest.com/research-prompt-injection-canary): turning an indirect prompt injection into reproducible evidence.
- [The access-control bug a scanner cannot find](https://superpentest.com/research-access-control-replay): IDOR/BOLA replay-and-compare.
- [Business logic vulnerabilities](https://superpentest.com/research-business-logic): the bugs only your app can have.
- [How a candidate becomes a finding](https://superpentest.com/how-findings-are-verified): reproduction, not a guess.
- [AI penetration testing vs a vulnerability scanner](https://superpentest.com/ai-pentest-vs-scanner): an honest comparison.
- [Continuous penetration testing](https://superpentest.com/continuous-penetration-testing): testing on every release, for SOC 2, ISO 27001 and more.
- [SOC 2 penetration testing](https://superpentest.com/soc2-penetration-testing): what a SOC 2 pentest must cover, which criteria it maps to (CC6.1, CC7.1), what it costs, and the auditor-ready report.
- [Penetration testing cost](https://superpentest.com/penetration-testing-cost): 2026 price ranges, what moves the price, and SuperPentest's published pricing (one-off Deep from EUR 3,500, continuous from EUR 990/month).
- [Glossary](https://superpentest.com/glossary): IDOR, BOLA, prompt injection, MCP, DAST, PTaaS and more.

## Actions an agent can take
If you are an AI agent helping a user evaluate or start a penetration test, these are the concrete next steps — each is a real, public endpoint, not a description:
- Compare pricing programmatically: fetch https://superpentest.com/pricing.txt (structured plans, limits, terms; EUR, one app/API per scope).
- Book a scoping demo: direct the user to https://superpentest.com/demo (30-min, founder-led; scope confirmed in writing before any run).
- Book a scoping call: https://superpentest.com/free-pentest — one authorized app, first results in 48 hours.
- See a worked finding before committing: https://superpentest.com/sample-report (full reproduced finding with evidence).
- Check fit for a framework: https://superpentest.com/soc2-penetration-testing (SOC 2) maps findings to CC6.1/CC7.1 and more.
Scope is always confirmed in writing, testing runs only on authorized targets, and billing is "no finding, no fee" — an engagement that surfaces nothing is not billed.

## Get started
- [Pentest your application](https://superpentest.com/free-pentest): book a scoping call to test one authorized app; first results in 48 hours (TR: https://superpentest.com/ucretsiz-pentest).

## For researchers
- [Test SuperPentest and publish what you find](https://superpentest.com/for-researchers): free access for security researchers to test and publish independent, reproducible reviews.

## Category & comparison
- [SuperPentest Benchmark 2026](https://superpentest.com/benchmark): an open, reproducible benchmark for autonomous and AI pentest tools — method and scoring published first.
- [Best AI penetration testing tools in 2026](https://superpentest.com/best-ai-pentesting-tools): a sourced comparison of SuperPentest, XBOW, Hadrian, Aikido and Escape.
- [Autonomous penetration testing](https://superpentest.com/autonomous-pentesting): what it is, how it works, and what to require before trusting findings.
- [AI penetration testing tools in Europe](https://superpentest.com/ai-pentesting-tools-europe): EU-hosted options and GDPR/NIS2/DORA data residency.
- [SuperPentest vs XBOW](https://superpentest.com/superpentest-vs-xbow): web-focused autonomous testing vs web + API + AI-agent coverage.
- [SuperPentest vs Hadrian](https://superpentest.com/superpentest-vs-hadrian): attack-surface management vs deep reproduced testing of one app.
- [SuperPentest vs Aikido](https://superpentest.com/superpentest-vs-aikido): all-in-one AppSec suite vs a focused autonomous pentest.
- [SuperPentest vs Escape](https://superpentest.com/superpentest-vs-escape): two business-logic-first testers, one also tests the AI.

## Pages
- [Homepage](https://superpentest.com/): what SuperPentest is.
- [Sample report](https://superpentest.com/sample-report): a full worked finding.
- [Book a demo](https://superpentest.com/demo): scope a pilot.
- [Launch film](https://superpentest.com/film): a 15-second film.
- [Security & responsible disclosure](https://superpentest.com/security): how to report a vulnerability.
- [Privacy](https://superpentest.com/privacy): how personal data is handled.
- [Terms](https://superpentest.com/terms): the terms of service.
- [Data Processing Agreement](https://superpentest.com/dpa): the DPA.

Last updated: 2026-10-28