Agent Index by Heritage Services
Submit / Claim
Home / Agents / Escape (AI pentesting and DAST)

Escape (AI pentesting and DAST)

Vendor: Escape · HQ: France · Category: Code security · Security

Last verified · Added · 5 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

Escape combines attack surface management, business-logic-aware DAST and AI pentesting for APIs, web apps and external assets. Its Cascade engine is described as multi-agent penetration testing that reasons about the application, chains multi-step exploits and proves findings with a working exploit, screenshots and logs; it can also re-test bug bounty findings. The vendor says its agents discover, test and remediate within engineering workflows and lists a Wiz integration. The privacy policy names Escape Technologies SAS with France as the country of the company.

Frameworks (vendor-stated)

No framework tags yet.

Pricing (as published)

Quote-based

Tasks

appsecpen test managementattack surface

Sources

  1. escape.tech/blog/introducing-cascade-the-multi-agent-penetration-testing/ (primary)
  2. escape.tech/
  3. escape.tech/pricing
  4. escape.tech/about
  5. escape.tech/privacy

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Narrow by region

Published country pages in this directory. Choose any region; this listing has no mapped HQ country page.

United States · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Use-case comparisons

  • AI code security agents — 33 verified listings (Application security scanning, suggested or automated code fixes, and pull-request security review)
  • Agentic pentesting AI agents — 33 verified listings (Autonomous or AI-assisted penetration testing, attack-surface testing and exploitable-path verification)

Compare Escape (AI pentesting and DAST) with

Alternatives

  • Aikido AI AutoFix — Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ.
  • AISLE (autonomous vulnerability discovery, triage and verified-fix agents) — Prague-headquartered AI code-security platform in which thousands of agents analyse a codebase in parallel for exploitable vulnerabilities, fix agents write patches, and agentic verification builds the repo and runs tests before opening a pull request for human merge. October 2026 added agent-driven proof of exploitability against running web apps and APIs. Cohere signed a letter of intent to acquire AISLE on Oct 15, 2026.
  • Amazon Q Developer security scanning — Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes.
  • Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests) — German AppSec product from Düsseldorf: a team of agents audits repositories (SAST, secrets, SCA, IaC, CI/CD) and cloud accounts, triages signals so only confirmed findings surface, pentests running apps inside a verified scope with a separate agent reproducing every finding, reviews pull requests with a merge-blocking status check, and opens fix pull requests that run your tests but never merge themselves.
  • Black Duck Signal (agentic AI AppSec) — Agentic AI application security tool (GA March 2026) with role- and task-based agents that analyse new code in any language, filter findings by exploitability and apply verified fixes, callable from Claude Code, Gemini and GitHub Copilot via MCP.
  • Checkmarx One Assist — Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel.

See all Escape alternatives →

FAQ (from this dataset)

What does Escape do?

Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps.

How much does Escape cost?

Quote-based

Where is Escape headquartered?

France

What are alternatives to Escape?

See the Escape alternatives page for category-sharing listings in relevance order, not a ranking. Escape alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.