• hacktron
Hacktron's $350 Pentest vs XBOW and Aikido at $4,000
We ran the same scan Doyensec used to test XBOW and Aikido, for a tenth of the price. Here's how our $350 AI pentest compared.
Your AI teammate
for security
backed by
with investors from
Stop chasing alerts. Start fixing what's real.
trusted by
Catch vulnerabilities before they ship.
Continuously surfaces exploitable vulnerabilities in pull requests, with enough context for your security team to triage and prioritize without chasing down developers.
Learn More We protect the teams building tomorrow
“The Hacktron team helped us uncover and remediate sophisticated vulnerabilities across our most critical systems incredibly quickly.
Their expertise brought immediate, measurable value to our security program, and I could not be more impressed with the results.
”
Kyle Polley
Head of Security
Perplexity
“Hacktron’s coordinated disclosure of their AI-augmented security research and rapid validation helped us quickly identify and close a subtle but serious vulnerability chain.
Their approach represents the cutting edge of modern security research.
”
Bil Harmer
CISO
Supabase
“We were genuinely impressed by Hacktron's speed and the results.
This is how the future of security testing looks like.
”
Filip Denker
Co-Founder & CTO
Yoto
Pro Plan
$40/ developer / mo.
Detect vulnerabilities automatically in your development workflow.
Includes
50 PRs (unlimited scans per PR) per developer, $1 per additional PR
Fix with AI using prompts delivered in PR comments
Auto-assigns coverage to new developers on their first PR
GitHub, GitLab, and Bitbucket integrations
Everything in Pro Plan, plus
Enterprise-grade modules with custom rule configuration per repo
Custom integrations with your existing security toolchain
SSO, audit logs, and role-based access controls
24/7 priority support with a dedicated account team
ADVISORIES
Real vulnerabilities. Real impact.
HTAI-001
Critical BeyondTrust
Pre-Auth RCE in BeyondTrust Remote Support & PRA
Pre-Authentication Remote Code Execution via deserialization vulnerability in BeyondTrust Remote Support and Privileged Remote Access (PRA) products.
ID
HTAI-001
Vendor
BeyondTrust
Reported
Jan 31, 2026
Type
RCE
Published Feb 6, 2026 Full details
Hear the latest from our team
• hacktron
When Your VPN Opens Your Private Network to the Public
How AI-assisted reverse engineering of stripped PAN-OS binaries led to finding a JWT algorithm confusion vulnerability in GlobalProtect's Cloud Authentication Service, enabling full VPN auth bypass with just a username.
• hacktron
RCE in VSCode Copilot Chat
Copilot agent mode is vulnerable to a prompt injection attack. If a repository maintainer clicks 'code with agent mode' on an issue, it will open a new codespace and copilot will automatically run the issue's description.
• hacktron
Hacktron Review for Open Source
We are opening up Hacktron Review for Open Source, giving qualifying maintainers free PR security reviews with inline findings, auto-resolution, and project-specific learning.
Hire your first AI security engineer