Category
AI penetration testing tools: what they are and who makes them
per-test ai pentests, continuous exposure with exploit proof, human-led ptaas with an ai layer, autonomous attack-path platforms: Ethiack, Hadrian, Intruder through Aikido Security.
Types of AI penetration testing tools
Per-test AI pentests
Ethiack, Hadrian Nova and Intruder sell a single web or API pentest for a posted amount, from €1,250 to $3,500. The buyer gets a report in days and a retest, with no annual contract. Coverage stays limited to the scope bought.
Continuous exposure with exploit proof
Hadrian Atlas, Ethiack Core and Detectify keep mapping the internet-facing estate and test whatever changes since the last run. Subscriptions run yearly, and cost grows with asset counts, domains and IP ranges. That model suits companies that deploy weekly and cannot wait for an annual test.
Human-led PTaaS with an AI layer
Cobalt and Astra combine automated detection with certified testers, billed in credits or annual plans. The human step adds time and cost, and in return produces audit-ready reports that some auditors may prefer over machine-only output, so confirm that with yours.
Autonomous attack-path platforms
XBOW, Horizon3.ai NodeZero and Pentera run autonomous attacks and re-test fixes, mostly for larger security teams that can triage output and fix findings quickly. Pricing is quoted, and NodeZero and Pentera reach internal networks and identity systems, while XBOW concentrates on applications.
Facts at a glance
| Tool | Publisher | Based in | Access |
|---|---|---|---|
| Ethiack | Ethiack S.A. | Portugal | Paid |
| Hadrian | Hadrian Security B.V. | Netherlands | Paid |
| Intruder | Intruder Systems Ltd | United Kingdom | Trial + API |
| Escape | Escape | France | Paid + API |
| Astra Security | Astra IT, Inc. | United States | Paid |
| Detectify | Detectify AB | Sweden | Paid + API |
| Cobalt | Cobalt Labs, Inc. | United States | Paid |
| XBOW | XBOW USA Inc. | United States | Paid + API |
| Horizon3.ai NodeZero | Horizon3.ai | United States | Paid + API |
| Pentera | Pentera | Israel and United States (offices in Tel Aviv and Burlington, headquarters not stated) | Paid |
| Burp Suite Professional | PortSwigger Ltd | United Kingdom | Trial |
| Aikido Security | Aikido Security BV | Belgium | Free tier + API |
