Built for startup speed: launch your penetration test in minutes, receive a compliance-ready report in 5 days, and only pay if we find an impactful vulnerability (CVSS ≥ 4.0).
What's included
Web apps, APIs, domains, subdomains, and IPs.
OWASP Top 10, business logic flaws, authentication bypasses, injection attacks, mapped to CWE and CVSS 4.0.
Structured report accepted for ISO 27001, SOC 2, PCI-DSS, and DORA audits.
Hackian validates each finding with a proof-of-concept exploit and keeps false positives near zero.
You select the assets you want to be tested, and Hackian gets to work immediately. We'll deliver a complete pentest report after 5 days, and you're only charged if we find an impactful vulnerability (CVSS ≥ 4.0).
Unlike traditional pentesting firms that schedule weeks out, our AI pentesting service launches in minutes - no NDAs to negotiate, no project kick-off calls.
T+0
Choose any public facing domains, IPs, or subdomains you want tested.
T+15 min
Hackian, our AI penetration testing agent, autonomously probes your attack surface testing web apps, APIs, and network services across 200+ vulnerability classes aligned with OWASP and PTES methodologies.
T+5 days
Compliance-ready report delivered. You're only invoiced if we find a CVSS >= 4.0 vulnerability.
"We have lots of security solutions, but I look at Ethiack first, because I know that when Ethiack alerts us, it's always valid and most probably serious!"
Pedro Zeferino
CISO @ NOS
"They quickly identify vulnerabilities even with our fast frequency of deployment. We can sleep better at night knowing that if something shows up, we'll know right away."
Paulo Ribeiro
VP of Engineering @ Smartex
"Their in-depth testing of our systems has transformed how we approach cybersecurity. Ethiack teaches us to think like attackers."
João Annes
CISO @ ANA Airports
"As the CEO of Zick Learn, I believe it's my role to make our company secure, not just today, but also tomorrow and the day after tomorrow. We treat a lot of client data, and protection is part of the product. Ethiack makes it possible for us to offer maximum security on every layer."
Matteo Penzo
CEO @ Zicklearn
We're developing the AI Hacking Agent that will protect organizations from AI-enabled threats. Born in Europe, we deliver professional penetration testing services to dozens of organizations and institutions - 24/7, at machine speed, with the precision of the world's best ethical hackers.
How Hackian exploited Business Logic Vulnerabilities on SonarQube and n8n→
How Hackian found a 0day and CVE on OpenClaw in under 2 hours→
How Hackian bypasses your WAF completely autonomously→
Pentesting reports accepted for
99.5%
Accuracy in finding exploitable vulnerabilities
100k+
Vulnerabilities identified with proof-of-concept exploit
75%
PortSwigger labs solved by our AI
200+
Different vulnerability classes covered (CWEs)
30x
Faster than a manual pentest
You're only charged if we find a CVSS >= 4.0 vulnerability. Even if we find nothing, your team gets a complete external pentest report to support launch readiness and compliance workflows.
+Start startup pentestBecause our AI is really good. It shocked DEFCON when it found 2 critical vulnerabilities, unassisted, during a live CTF, or when it found a one-click RCE on OpenClaw in under 2 hours.
We've made the math, and the chances of finding an impactful finding in your assets is so high we can give you this guarantee.
Startup launch offer
€8,000
€4,000
Spring Offer - 50% offTraditional penetration tests cost
€15,000-€30,000+. Ours? Free if we find nothing.
Any exploitable finding with a CVSS score ≥ 4.0.
Yes, you can select any public facing assets you want tested.
No, it's not ethical. You'll know of any findings we uncovered.
Not under this offer. Available as separate add-ons.
We assume that you patch findings as soon as they're uncovered, but you can let us know during sign up about any existing vulnerabilities.
Yes, you'll get a compliance-ready pentest report no matter the outcome.
No installation required. We verify your ownership of the assets through a DNS record.
Ethiack offers external penetration testing services for web applications, APIs, domains, subdomains, and network assets. Our AI-driven pentesting service (Hackian) covers 200+ vulnerability classes including the OWASP Top 10 and delivers a compliance-ready report in 5 days. Optional gray-box testing with authenticated sessions is available as an add-on.
Our penetration tests are accepted for ISO 27001, SOC 2, PCI-DSS, and DORA compliance audits. Hackian, our AI pentesting agent, autonomously discovers and exploits vulnerabilities - including injection flaws, broken authentication, business logic issues, and misconfigurations - and validates each finding with a proof-of-concept exploit before reporting.
Yes, reports are compliance-ready for various frameworks including ISO 27001, SOC 2, PCI-DSS, and DORA.
Submit the form and we'll begin your penetration test immediately. Your compliance-ready report will be ready in 5 days.
