External Attack Surface Penetration Testing
Define scope. Confirm authority. Start securely.
Prove your attack surface in 2 business days.
$500 for the first target, $300 for each additional. Web apps, network nodes and AI agent endpoints.
Asset discovery is free. You only pay when you order testing.
- 01ScopePick targets
- 02PaySecure via Stripe
- 03TestDeterministic + AI
- 04ReportIn 2 business days
Results in 2 business days
From confirmed scope to a delivered report.
No findings, full refund
If we don't find a real vulnerability, you get your money back. Refunds take 5–10 business days.
Audit-ready reports
Evidence for ISO/IEC 27001, SOC 2 Type II, PCI DSS and other frameworks that require a penetration test.
Find and select your targets
Free · no credit card required
Enter a root domain to find public certificate records and current IP addresses. Nothing is scanned or attacked. Check the assets you want tested — each selection becomes a target below.
Protected against automated abuse · 5 scans per hour · verification sits below your targets
Your targets · 0
No targets yet. Run discovery above and check the assets you want tested, or add one manually.
Confirm you are human before running discovery.
Who is the primary contact for this assessment?
We'll contact you to confirm scope, testing authorization, and report delivery.
What should our team know?
You confirmed in 03 · Assessment Authorization that you are authorized to approve security testing for these assets. Gadriel will manually review ownership and scope before testing.
Payments are processed by Stripe. Card details never reach Gadriel.
Need to pay by invoice, PO or ACH? Request an invoice
