Tool profile
Escape: cost, fit and limits
Escape is an offensive security platform made by Escape Technologies SAS of Biarritz, France, that uses AI agents for pentesting, business-logic-aware DAST and attack surface management across applications and APIs for engineering-led security teams. Pricing is by quote.
What to know first
Escape lists four modules (AI Pentesting, business-logic-aware DAST, external network pentesting and attack surface management) and asks buyers to talk to the team about pricing. A public API, CLI and MCP server let results flow into pipelines and editors. The company is registered in France under a Bayonne trade register number. No free tier or trial appeared. Ask for a pilot scope.
Escape at a glance
| Maker | Escape, France |
|---|---|
| Free plan | No |
| Entry price | Quote only |
| API access | Yes |
| Category | Best AI API Security Software in 2026, rank 4 of 10 |
| Website | escape.tech |
Who Escape is best for
Teams testing workflows, not payloads
The DAST module is described as business-logic-aware, testing access control and multi-step processes beyond simple payload checks. It targets the flaws that scanners miss.
Developers using Cursor or Claude Code
An MCP server and integrations with Cursor, Claude Code and Gemini let findings reach the editor where code is written.
Teams reporting to auditors
Compliance reporting covers PCI-DSS, HIPAA, SOC 2, ISO 27001 and more than 20 other frameworks, per the home page. Ask whether the formats match your auditor.
Escape plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| AI Pentesting | Quote only | Agentic testing that proves exploitability and finds multi-step attack chains. The pricing page offers scoping with the team. |
| Business-logic-aware DAST | Quote only | Tests workflows, access control and multi-step processes, with a public API, CLI and MCP server to automate runs. |
| Attack Surface Management | Quote only | Discovers and validates exposure across applications, APIs and infrastructure; external network pentesting is a related module. |
| AWS Marketplace purchase | Listed channel | The page lists purchasing through AWS Marketplace and more than 20 channel partners, with no price shown. |
Checked October 2026.
What Escape does
- Agentic pentesting
- AI agents discover, test and attempt to prove exploitability of findings, aiming to replace a manual process that the home page says took five days and now takes five hours.
- Business-logic DAST
- The scanner tests how workflows behave, covering authorization and multi-step flows that payload-based scanners tend to treat as valid requests. Test depth is described but not measured on the page.
- External network pentesting
- Continuous testing of internet-reachable hosts, ports and services extends coverage beyond web apps to the perimeter. The page describes it as continuous, not scheduled. Scope is set per engagement.
- Public API, CLI and MCP server
- Pipelines can start scans and pull results through the API and CLI, and the MCP server connects Escape to AI assistants. Rate limits and authentication details are not listed on the pages we read.
- Research publications
- The site publishes research such as a Keycloak PII disclosure and an architecture note on its multi-agent pentesting design, which shows how the team works.
How Escape handles your data
The terms page identifies Escape Technologies, a French simplified joint-stock company registered in Biarritz and in the Bayonne trade register. The pricing page links to a trust center, and a customer story mentions its own SOC 2 Type II audit, which is the customer's and not Escape's. The pages we opened did not state hosting regions, retention periods, certifications of Escape itself or whether customer data trains AI models, so the vendor's policy was not checked for this.
Where Escape falls short in practice
- No trial or price. The only call to action on the pricing page is a demo booking. Teams that want to test on a staging API this week cannot do so without sales contact.
- Customer metrics are self-reported. Figures such as 2,000 security teams and 393 percent ROI come from the vendor. Treat them as claims and ask for references with similar stacks.
- Own certification unclear. Compliance reporting is a feature for the customer, not proof of Escape's own status. Ask the trust center for its SOC 2 or ISO documents.
Works with
Alternatives to Escape
Escape: common questions
What products does Escape sell?
The home page lists AI Pentesting, business-logic-aware DAST, external network pentesting and attack surface management. They are presented as one offensive security platform. Ask in your quote which modules are included, since the page gives no price split between them.
Can I automate Escape from my pipeline?
Yes. The home page says it offers a public API, a CLI and an MCP server, with integrations for Wiz, Cursor, Claude Code and Gemini. The pages do not list rate limits or authentication details, so check the documentation site before building.
Is Escape a French company?
Yes. The terms page names Escape Technologies as a French SAS with a registered address in Biarritz and a Bayonne trade register number. That identifies the contracting entity, though hosting regions for customer data are not stated on the pages we opened.
Does Escape publish prices?
No. The pricing page lists modules and says to talk to the team about pricing for your environment. The only call to action is a demo booking, and no free plan or trial was shown. Prepare an asset and API count before the call.
Which compliance reports does Escape produce?
The home page says reporting covers PCI-DSS, HIPAA, SOC 2, ISO 27001 and more than 20 other frameworks. These are reports about your applications, not certifications of Escape. Ask a sample report to see whether the format suits your auditors.