Intruder AI Pentesting

What it does

Intruder, a London-based exposure-management vendor, offers AI pentesting for web applications. Its page says pentesting agents built and trained by its CREST-certified pentesters run with full code awareness after customers connect a GitHub or GitLab repository and provide context and credentials, and deliver a pentest report within hours intended as evidence for SOC 2 and ISO 27001. Example issues customers found include broken authorisation, IDORs, payment flaws and race conditions (vendor-reported). Issue-level micro-pentests automate triage and investigation of findings from Intruder's vulnerability scanners. Intruder's wider platform covers continuous vulnerability scanning, attack surface management, cloud security and a GregAI security analyst. The terms name Intruder Systems Ltd, registered in England with a London office. Pricing is published.

Frameworks (vendor-stated)

No framework tags yet.

Pricing (as published)

AI web-app pentests start from $3,500 per test; the scanning platform has a free-forever plan and paid monthly/annual tiers (intruder.io/pricing).

Tasks

pen test managementappsecvulnerability management

Sources

1. intruder.io/platform/ai-pentesting (primary)
2. intruder.io/pricing
3. intruder.io/legal/terms
4. intruder.io/about-us

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Use-case comparisons

• Agentic pentesting AI agents — 33 verified listings (Autonomous or AI-assisted penetration testing, attack-surface testing and exploitable-path verification)

Compare Intruder AI Pentesting with

• 
  7AI agentic security platform vs Intruder AI Pentesting
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) vs Intruder AI Pentesting
• 
  Adaptive Security Agentic Email Security and Phish Triage vs Intruder AI Pentesting
• 
  Aikido Attack AI Pentesting vs Intruder AI Pentesting
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) vs Intruder AI Pentesting
• A
  Andesite Human-AI SOC (Azimuth for Government) vs Intruder AI Pentesting
• 
  Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents) vs Intruder AI Pentesting
• 
  AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation) vs Intruder AI Pentesting
• 
  Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents) vs Intruder AI Pentesting
• 
  Ares Cyber agentic AI security testing platform (autonomous exploit chaining and runtime verification across SAST, SCA, DAST, VA and pentest) vs Intruder AI Pentesting

Alternatives

• 
  7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
• 
  Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
• 
  Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
• 
  Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
• 
  AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.
• A
  Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.

See all Intruder AI Pentesting alternatives →

FAQ (from this dataset)

What does Intruder AI Pentesting do?

On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings.

How much does Intruder AI Pentesting cost?

AI web-app pentests start from $3,500 per test; the scanning platform has a free-forever plan and paid monthly/annual tiers (intruder.io/pricing).

Where is Intruder headquartered?

United Kingdom

What are alternatives to Intruder AI Pentesting?

See the Intruder AI Pentesting alternatives page for category-sharing listings in relevance order, not a ranking. Intruder AI Pentesting alternatives.

Stay updated