| What it does | On-demand penetration testing by ethical hackers
| Security monitoring for AI-built apps
|
|---|
| Stage | Established
| Not given
|
|---|
| Founded | 2020
| Not given
|
|---|
| Based in | GB
| Not given
|
|---|
| Pricing model | Contact for pricing
| Freemium
|
|---|
| Pricing | Not given
| Free scan: $0 for one scan of one verified domain. Full Report: US$19 one-time per app with every finding unlocked and 14 days of re-scans. Monitor: US$19/mo for one app with weekly automatic re-scans and deploy-triggered scans. Monitor 5: US$49/mo for up to 5 apps with everything in Monitor plus pr
|
|---|
| Key features | - On-demand penetration testing triggered by releases, tool findings, or audit requirements
- Manual validation of tool findings to filter false positives
- Audit-ready compliance reports with named lead tester and methodology
- Web application, API and business logic testing
- Social engineering and red team testing
- 35 different security services accessible through one engagement model
- Credit-based pricing with transparent budgeting
- AI-accelerated testing validated by human expert hackers
- Average 1-day turnaround from request to start
- Support for NIS2 and ISO 27001 compliance mapping
| - Leaked API key detection in JavaScript bundles
- Production source map exposure checks
- Open Supabase table detection with public anon key
- Public storage bucket scanning
- Exposed .env and .git file detection
- Security header validation (CSP, HSTS)
- Deploy-triggered automatic rescans
- Scan history and diff view
- No-sign-up quick check for public findings
|
|---|
| What makes it different | - On-demand access to ethical hackers instead of fixed annual cycles
- Manual validation filters false positives from automated tools
- Audit-grade signed reports mapped to compliance frameworks
- Complements rather than replaces existing security tooling
- Finds sophisticated vulnerabilities that automated tools miss
| - Read-only passive scanning with no exploitation or brute-forcing
- Secrets shown masked, data never stored in full
- Tuned for AI code generator mistakes
- Free verification and reporting before paid subscription
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 13 ▼ −1 (down) since last check | 4 ▲ +2 (up) since last check |
|---|
| Trust Flow (Majestic) | 27 | 0 |
|---|
| Citation Flow (Majestic) | 44 | 19 |
|---|
| Referring domains (Majestic) | 729 | 4 |
|---|
RedSOC
Abbi Labs