AVAILABLE IN
AI Pentest:
automated penetration testing of your entire
attack surface
In the AI Pentest, AI agents test your infrastructure the way an attacker would.
CheckFix shows where your attack surface lies. The AI Pentest actively attacks and tests what can be exploited.
On our own hardware in Austria, with no data shared with third parties.
Automated penetration testing
Own hardware in Austria
Report Builder for tech & management
1 re-check per run included
Attackers have long been using AI
Hackers find the same gaps as before AI, but they work faster and more efficiently.
What is the AI Pentest?
The AI Pentest is the answer to the flood of attacks by AI-driven systems. They hit more than large, complex organisations – small companies in particular end up in the crosshairs, simply because an automated attack is quick, which makes even a small target worth it.
If you want to keep up, you test your own systems with the same tools and close your security gaps before someone exploits them. That is exactly why secinto developed the AI Pentest: an automated penetration test as an add-on to the external security assessment by CheckFix.
One clarification first, because the term is often misunderstood: this is not about testing an AI system for vulnerabilities. Here, our AI agents attack your infrastructure, the way a real attacker would – on our own hardware in Austria, without your data going to any third party.
The AI Pentest is built on CheckFix. First, CheckFix identifies the attack surface reachable from outside. You should close these gaps first. Whatever is still open after that, the agents take on and test how it can be exploited.
An open port, an outdated service banner, a weak configuration: the agent turns these into a real attack path.
✓ Automated penetration testing ✓ Own hardware in Austria ✓ Runs do not expire
How the AI Pentest works
Five steps from attack surface to report
1. Run CheckFix
CheckFix identifies the attack surface reachable from outside, based on your domains including subdomains.
2. Approve the scope
In the dashboard, you switch to the AI Pentest and approve individual hosts or the entire company.
3. Agents work through the scope
The agents work through the approved scope systematically and decide for themselves where it pays to keep digging.
4. Findings in the dashboard
All findings appear in your dashboard with full technical details.
5. Compile the report
In the Report Builder, you create the report you need: a detailed report per host or an executive summary for management.
Billing is based on runs, meaning complete passes. It follows the same logic as person-days in a classic penetration test: you decide how much search depth the test is worth to you. Our pentest agent learned from our pentesters where to keep digging and when to move on to the next target.
Included in every package
Everything you need for a reliable penetration test
Runs according to your package, freely usable across your scope
Multi-stage quality assurance: The agent corrects itself, and a second model cross-checks the results
Our pentesters monitor the system continuously and step in when needed
Findings in the dashboard with full technical details
Report Builder for a detailed report per host or an executive summary
Re-check: 1 per run, available within 4 weeks
Purchased runs do not expire.
You use them when and where you want, even spread across several tests.
The AI Pentest runs on our own hardware in Austria, with our own agent.
AI Pentest or classic penetration test?
What you can expect from each approach
AI Pentest
- Automated penetration testing by AI agents
- From € 3,900 for 4 runs, net
- Can be repeated regularly
- 1 re-check per run: you see whether the gap is really closed
- Our pentesters monitor the system continuously
The AI Pentest costs less than a manual penetration test and can be repeated regularly. After fixing, the re-check shows you whether the gap is really closed. Behind the agents are experienced pentesters who monitor the system continuously and, if you wish, explain the results to you in detail in the findings review.
Classic penetration test
- Manual test by security experts
- Can easily cost € 15,000 for a comparable scope
- Usually once a year
- Proof of improvement only with a new test
- Strong with complex business logic and very specific scenarios
For very specific scenarios, or if you would like personal advice and a person to guide you through the process, secinto’s pentesters are still available. Feel free to contact us.
For regular, broad testing of your attack surface, however, the AI Pentest is the faster and more affordable choice.
Why not just pick the cheapest autonomous pentest?
Cheap autonomous pentests are available today. Price alone says little. Four points that matter:
CheckFix as the foundation
The AI Pentest builds on a complete analysis of your external attack surface. Instead of blindly testing a single target, it tests what is actually reachable in your environment.
Scope instead of a single target
Others price a single web application. With us, you approve the scope you need, and the agent decides where depth makes sense.
Data sovereignty
The AI Pentest runs on our own hardware in Austria. Your data does not go to any cloud service or third party. For critical infrastructure operators and companies subject to NIS2, this is often the deciding question.
Human oversight
Behind the agent are a second model that cross-checks its results and our pentesters, who continuously monitor and further develop the system.
AI Pentest pricing
Buy once, use flexibly
An active CheckFix Basic or Premium subscription is required.
You approve your scope and book the right number of pentest runs. A run is one complete pass of the penetration test across your approved scope.
All prices net, plus VAT.
SMALL
€ 3,900 one-time
4 pentest runs
Recommended for up to approx. 5 hosts
MEDIUM
€ 7,500 one-time
10 pentest runs
Recommended for a full assessment of SMEs
LARGE
€ 13,500 one-time
20 pentest runs
Recommended for larger environments
ENTERPRISE
on request
40+ pentest runs
Recommended for corporate groups and critical infrastructure
Included in every package
- Our own pentest agent on our own hardware in Austria
- CheckFix first identifies the external attack surface
- Freely selectable scope: individual hosts or the entire company
- Findings with all details in the dashboard
- Report Builder: detailed report per host + executive summary
- 1 re-check per run (within 4 weeks)
Already a CheckFix customer? Add it directly in your dashboard.
Additional services
FINDINGS REVIEW
€ 900
- 2 h preparation
- 2 h online session
- Findings become your action plan
Together with you, we translate the findings into your concrete action plan, because the right order depends on your infrastructure.
PENTEST CERTIFICATE
€ 750
- Officially signed by secinto
- Proof of scope, time period and methodology
- For audits and tenders
secinto officially confirms the test that was carried out, for example for ISO 27001, NIS2 or TISAX®.
Who is the AI Pentest for?
The AI Pentest is aimed at organisations with specific security and compliance requirements: critical infrastructure operators, companies subject to NIS2, DORA, ISO 27001 or the Austrian NISG 2026, and larger businesses that want to test their attack surface regularly and reliably.
Frequently asked questions about the AI Pentest
Is the CheckFix AI Pentest a security test for AI systems?
No. In the CheckFix AI Pentest, purpose-built AI agents test your infrastructure for exploitable vulnerabilities. It is not about testing an AI or language model itself.
How much does a CheckFix AI Pentest cost?
The AI Pentest is an add-on to CheckFix Basic or Premium and requires the external security assessment. Billing is based on runs. The smallest package includes 4 runs for 3,900 euros net, the largest standard package 20 runs for 13,500 euros. Purchased runs do not expire, even if the CheckFix subscription is cancelled.
What is a run?
A run is one pass of the agents across your approved scope. More runs mean more search depth. Each purchased run includes one re-check, available within 4 weeks.
How does it differ from a manual penetration test?
A manual penetration test with a comparable scope can easily cost 15,000 euros and usually runs once a year. The AI Pentest costs less and can be repeated regularly. For very specific scenarios, the experience of human pentesters remains valuable. That is why our pentesters monitor the system continuously.
Does the AI Pentest replace a classic pentest?
For regular, broad testing of your attack surface, yes. For complex business logic or very critical individual targets, a manual test is a useful addition.
Do I need CheckFix for this?
Yes. CheckFix first identifies your external attack surface. The AI Pentest builds on that.
Where is my data processed?
The AI Pentest runs on our own hardware in Austria. Your data does not go to any cloud service or third party. The data from CheckFix stays in Europe.
Is the AI Pentest suitable for NIS2, NISG 2026 or ISO 27001?
It provides reliable technical proof of your external security posture. With the paid pentest certificate, secinto officially confirms the test and signs the proof of scope, time period and methodology, for use in audits and tenders.
1
re-check per run
included
included
100 %
on our own hardware
in Austria
in Austria
0
runs that expire
Ready to have your attack surface tested?
Start with CheckFix and enable the AI Pentest directly in your dashboard.
All prices net, plus VAT.
Runs do not expire
Own hardware in Austria
Runs do not expire
Own hardware in Austria